Azure Kubernetes Service (AKS) Private Link is now generally available. Use it to isolate your Kubernetes API server within your Azure virtual network, enabling fully private communication with the managed Kubernetes control plane hosted by AKS. The Kubernetes API server exposes numerous sensitive operations, including the ability to add, remove, and scale containerized applications. By limiting network access to that endpoint to the virtual network, you can further limit the potential for unauthorized access and ensure that all traffic flows through trusted network paths.
Learn more
Read the blog post