Azure Container Security Report

Overview

This report reviews Container Security across your selected Azure subscriptions using 18 enabled configuration and recommendation checks. It identifies affected resources and provides remediation guidance for failed checks.

Checks use the configuration and recommendations available for the selected subscriptions. Resources that cannot be evaluated are reported as unavailable or not applicable.

Assessment scope

• Advisor — 6 checks
• Container Instance — 1 checks
• Container Registry — 3 checks
• Container Service — 8 checks

Example checks

• Azure Policy Add-on should be enabled on Azure Kubernetes Services Cluster
• Ensure that the --authorization-mode Argument is Not Set to AlwaysAllow
• Kubernetes Clusters Should Not Grant CAPSYSADMIN Security Capabilities
• Ensure that a Client CA File is Configured
• Kubernetes Clusters Should Disable Automounting API Credentials

Upon completion, the report lists passed and failed checks, affected resources, unavailable evidence, and actionable remediation guidance.