Skip to content

Commit eae6fd5

Browse files
Merge pull request #269301 from MGoedtel/task231338
updated aks concepts-security.md
2 parents fc6cc2f + cff41ac commit eae6fd5

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/aks/concepts-security.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn about security in Azure Kubernetes Service (AKS), including m
44
author: miwithro
55
ms.topic: conceptual
66
ms.custom: build-2023
7-
ms.date: 01/11/2024
7+
ms.date: 03/18/2024
88
ms.author: miwithro
99
---
1010

@@ -56,6 +56,8 @@ When an AKS cluster is created or scaled up, the nodes are automatically deploye
5656
5757
For more information about the security upgrade process for Linux and Windows worker nodes, see [Security patching nodes][aks-vulnerability-management-nodes].
5858

59+
AKS clusters running Azure Generation 2 VMs includes support for [Trusted Launch][trusted-launch] (preview), which protects against advanced and persistent attack techniques by combining technologies that can be independently enabled, like secure boot and virtualized version of trusted platform module (vTPM). Administrators can deploy AKS worker nodes with verified and signed bootloaders, OS kernels, and drivers to ensure integrity of the entire boot chain of the underlying VM.
60+
5961
### Node authorization
6062

6163
Node authorization is a special-purpose authorization mode that specifically authorizes kubelet API requests to protect against East-West attacks. Node authorization is enabled by default on AKS 1.24 + clusters.
@@ -160,3 +162,4 @@ For more information on core Kubernetes and AKS concepts, see:
160162
[microsoft-vulnerability-management-aks]: concepts-vulnerability-management.md
161163
[aks-vulnerability-management-nodes]: concepts-vulnerability-management.md#worker-nodes
162164
[manage-ssh-access]: manage-ssh-node-access.md
165+
[trusted-launch]: use-trusted-launch.md

0 commit comments

Comments
 (0)