Ensure that Azure Kubernetes Service (AKS) clusters are using the Network Contributor role for managing networking resources and accessing other Azure services within an Azure Virtual Network (VNet). The Network Contributor role role enables seamless network management, facilitates service integration, and enhances overall security.
excellence
By implementing the Network Contributor role, Azure Kubernetes Service (AKS) clusters are guaranteed to possess the requisite permissions for managing Azure cloud networking resources, which are essential for accessing other Azure services from within a Virtual Network.
Audit
To determine if your AKS clusters are configured to use the Network Contributor role, perform the following actions:
Remediation / Resolution
To assign the Network Contributor role to your Azure Kubernetes Service (AKS) clusters, perform the following actions:
References
- Azure Official Documentation
- Access and identity options for Azure Kubernetes Service (AKS)
- Network Contributor
- Assign Azure roles using the Azure portal
- Azure PowerShell Documentation
- az aks list
- az aks show
- az role assignment list
- az role assignment create
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
You are auditing:
Use Network Contributor Role for Managing Azure Network Resources
Risk Level: Medium