HIGH
Source
CloudSploit
ID
network-exposure

Network Exposure

Ensures that Azure Kubernetes clusters are not exposed to the internet.

In a private cluster, the control plane or API server has internal IP addresses that are defined in the RFC1918 - Address Allocation for Private Internet document. By using a private cluster, you can ensure network traffic between your API server and your node pools remains on the private network only.

Modify cluster network configuration and enable private cluster feature.