AZ491830 - Public Preview: Agentless runtime vulnerability assessment for AKS-owned images (Microsoft Defender for Cloud)

Azure Updates

Discussionpowered by zap.ms

Published

May 21, 2025

Status

In preview

Timeline

  • May 2025
    Preview

Product

Microsoft Defender for Cloud
Azure Kubernetes Service (AKS)

Tag

Features
Microsoft Build

Category

Hybrid + multicloud
Security
Compute
Containers

Description

Microsoft Defender for Cloud provides comprehensive runtime vulnerability assessment and guided remediation for vulnerable container images that are owned, maintained, and deployed by a cloud service, including those in Azure Kubernetes Service. Remediation may involve upgrading the AKS cluster version or reporting the issue to a specific service channel for vulnerabilities management.  


This new public preview capability allows users to distinguish AKS-owned images from customer-owned images, provides visibility into any CVEs in the AKS image, and provides recommendations on the AKS version or release containing the fixes for the vulnerabilities. 

Learn more.