Deployment safeguards in AKS now support mutations in enforcement mode in public preview.
In enforcement mode, deployment safeguards will either deny or mutate (automatically fix) your deployment based on the individual safeguards.
A mutation will be triggered if your Kubernetes resources lack the best practices.
To view which safeguards allow for mutations, visit the deployment safeguard documentation.