Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
33 rules foundof 11,219Page 2 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-AKS-AUTOMATIC-5.1.3 | Limit AKS access to pull images from Azure Container Registry (ACR)aks-automatic · Level 1 | aks-automatic | Medium | 1 | Manual review |
| TMA-AKS-AUTOMATIC-5.1.4 | Restrict AKS workloads to approved container registries onlyaks-automatic · Level 2 | aks-automatic | Medium | 2 | Manual review |
| TMA-AKS-AUTOMATIC-5.4.1 | Restrict Access to the Control Plane Endpointaks-automatic · Level 1 | aks-automatic | Medium | 1 | Automated |
| TMA-AKS-AUTOMATIC-5.4.4 | Use HTTPS with valid TLS certificates for externally exposed workloadsaks-automatic · Level 2 | aks-automatic | Medium | 2 | Manual review |
| TMA-AKS-AUTOMATIC-5.5.1 | Use Microsoft Entra ID authorization for the Kubernetes APIaks-automatic · Level 2 | aks-automatic | Medium | 2 | Manual review |
| TMA-AKS-AUTOMATIC-4.5.1 | Create administrative boundaries between resources using namespacesaks-automatic · Level 1 | aks-automatic | Low | 1 | Manual review |
| TMA-AKS-AUTOMATIC-4.5.2 | Apply Security Context to Your Pods and Containersaks-automatic · Level 2 | aks-automatic | Low | 2 | Manual review |
| TMA-AKS-AUTOMATIC-4.5.3 | The default namespace should not be usedaks-automatic · Level 2 | aks-automatic | Low | 2 | Automated |