Today you can
control an AKS cluster's egress traffic using Azure Firewall. While this
configuration is intended to isolate the cluster to protect sensitive business
or customer data, it adds an additional layer of management complexity and
cost.
AKS now provides the
option to use network isolated clusters to simplify the process of restricting
network access and reduce the risk of unintentional exposure of the cluster's
public endpoints to prevent security breaches.