AKS run command is now generally available. This command allows you to remotely invoke commands in an AKS cluster through the AKS API. This feature introduces a new API that allows you to, for example, execute just-in-time commands from a remote laptop for a private cluster. This can greatly assist with quick just-in-time access to a private cluster when the client is not on the cluster private network while still retaining and enforcing full RBAC controls and private API server.
For example,
az aks command invoke "kubectl get nodes"
Learn more.