Merge pull request #187835 from memildin/patch-13

Updated "configuration required" table

Author: PRMerger8

articles/defender-for-cloud/kubernetes-workload-protections.md

@@ -77,23 +77,22 @@ To configure the recommendations, install the  **Azure Policy add-on for Kuberne
 
     | Recommendation name                                                         | Security control                         | Configuration required |
     |-----------------------------------------------------------------------------|------------------------------------------|------------------------|
+    | Container CPU and memory limits should be enforced                          | Protect applications against DDoS attack | **Yes**                |
+    | Container images should be deployed only from trusted registries            | Remediate vulnerabilities                | **Yes**                |
     | Containers should listen on allowed ports only                              | Restrict unauthorized network access     | **Yes**                |
+    | Least privileged Linux capabilities should be enforced for containers       | Manage access and permissions            | **Yes**                |
+    | Overriding or disabling of containers AppArmor profile should be restricted | Remediate security configurations        | **Yes**                |
     | Services should listen on allowed ports only                                | Restrict unauthorized network access     | **Yes**                |
     | Usage of host networking and ports should be restricted                     | Restrict unauthorized network access     | **Yes**                |
-    | Overriding or disabling of containers AppArmor profile should be restricted | Remediate security configurations        | **Yes**                |
-    | Container images should be deployed only from trusted registries            | Remediate vulnerabilities                | **Yes**                |
-    | Least privileged Linux capabilities should be enforced for containers       | Manage access and permissions            | **Yes**                |
     | Usage of pod HostPath volume mounts should be restricted to a known list    | Manage access and permissions            | **Yes**                |
-    | Privileged containers should be avoided                                     | Manage access and permissions            | No                     |
     | Container with privilege escalation should be avoided                       | Manage access and permissions            | No                     |
-    | Kubernetes clusters should disable automounting API credentials             | Manage access and permissions            | No                     |
-    | Immutable (read-only) root filesystem should be enforced for containers     | Manage access and permissions            | No                     |
-    | Container with privilege escalation should be avoided                       | Manage access and permissions            | No                     |
-    | Running containers as root user should be avoided                           | Manage access and permissions            | No                     |
     | Containers sharing sensitive host namespaces should be avoided              | Manage access and permissions            | No                     |
-    | Container CPU and memory limits should be enforced                          | Protect applications against DDoS attack | No                     |
+    | Immutable (read-only) root filesystem should be enforced for containers     | Manage access and permissions            | No                     |
     | Kubernetes clusters should be accessible only over HTTPS                    | Encrypt data in transit                  | No                     |
+    | Kubernetes clusters should disable automounting API credentials             | Manage access and permissions            | No                     |
     | Kubernetes clusters should not use the default namespace                    | Implement security best practices        | No                     |
+    | Privileged containers should be avoided                                     | Manage access and permissions            | No                     |
+    | Running containers as root user should be avoided                           | Manage access and permissions            | No                     |
     ||||