Secure Shell (SSH) is currently on by default for AKS provisioned nodes, and you must disable SSH manually.
This public preview feature allows you to disable or enable SSH. This gives you the ability to secure your cluster and reduce the attack surface.
To learn more, visit: aka.ms/aks/disablessh