Merge pull request #275267 from MicrosoftDocs/release-build-2024-aks-cost-management

[Build 2024 Ship Room] release-build-2024-aks-cost-management

Author: WendyRing

articles/aks/cost-analysis.md

@@ -7,7 +7,7 @@ ms.service: azure-kubernetes-service
 ms.subservice: aks-monitoring
 ms.custom: ignite-2023, devx-track-azurecli
 ms.topic: how-to
-ms.date: 03/15/2024
+ms.date: 05/06/2024
 
 #CustomerIntent: As a cluster operator, I want to obtain cost management information, perform cost attribution, and improve my cluster footprint
 ---
@@ -40,14 +40,17 @@ The AKS cost analysis addon is built on top of [OpenCost](https://www.opencost.i
 
 * Your cluster must be deployed with a [Microsoft Entra Workload ID](./workload-identity-overview.md) configured.
 
-* If using the Azure CLI, you must have version `2.44.0` or later installed, and the `aks-preview` Azure CLI extension version `0.5.155` or later installed.
-
 * Kubernetes cost views are available only for the following Microsoft Azure Offer types. For more information on offer types, see [Supported Microsoft Azure offers](/azure/cost-management-billing/costs/understand-cost-mgt-data#supported-microsoft-azure-offers). 
     * Enterprise Agreement
     * Microsoft Customer Agreement
 
+* Access to the Azure API including Azure Resource Manager (ARM) API. For a list of fully qualified domain names (FQDNs) required, see [AKS Cost Analysis required FQDN](./outbound-rules-control-egress.md#aks-cost-analysis-add-on).
+
 * Virtual nodes aren't supported at this time.
 
+* AKS Automatic is not supported at this time.
+
+* If using the Azure CLI, you must have version `2.44.0` or later installed, and the `aks-preview` Azure CLI extension version `0.5.155` or later installed.
 
 ### Install or update the `aks-preview` Azure CLI extension
 

articles/aks/outbound-rules-control-egress.md

@@ -227,6 +227,15 @@ There are two options to provide access to Azure Monitor for containers:
 | **`data.policy.azure.us`** | **`HTTPS:443`** | This address is used to pull the Kubernetes policies and to report cluster compliance status to policy service. |
 | **`store.policy.azure.us`** | **`HTTPS:443`** | This address is used to pull the Gatekeeper artifacts of built-in policies. |
 
+### AKS cost analysis add-on
+
+#### Required FQDN / application rules
+
+| FQDN                                                       | Port      | Use      |
+|------------------------------------------------------------|-----------|----------|
+| **`management.azure.com`** <br/> **`management.usgovcloudapi.net`** (Azure Government) <br/> **`management.chinacloudapi.cn`** (Azure operated by 21Vianet)| **`HTTPS:443`** | Required for Kubernetes operations against the Azure API. |
+| **`login.microsoftonline.com`** <br/> **`login.microsoftonline.us`** (Azure Government) <br/> **`login.microsoftonline.cn`** (Azure operated by 21Vianet) | **`HTTPS:443`** | Required for Microsoft Entra ID authentication. |
+
 ## Cluster extensions
 
 ### Required FQDN / application rules