Microsoft Defender for Cloud gating
vulnerable deployments feature for Azure Kubernetes Service (AKS) is now in
public preview. This feature allows you to evaluate deployments in Kubernetes
and ensure each image is safe before deployment, based on Vulnerability
Assessment and organization security policy. Gating involves both auditing and
blocking deployments, as well as terminating existing deployments which do not
adhere to the required policies.
This feature is based on two new capabilities:
- Vulnerability findings artifact:
Generation of findings for each container image scanned for vulnerability
assessment.
- Customized security rules: You can
customize security rules and configure required actions - 'audit' or 'deny' -
for various environments, for Kubernetes clusters, or for namespaces, tailored
to specific organization needs and compliance requirements.
Learn more.