> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/azure-identities/azure-resource-management/managed-clusters.md).

# Managed Clusters

Open **Unified Identities › Resources**, filter **Providers** to **Azure Resource Management › Managed Cluster**, then select a row to open its details. Managed clusters are Azure Kubernetes Service (AKS) clusters.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-37449e5ff48715d11cad8264fdc1ffed6400d656%2FmangedCluster_List.PNG?alt=media" alt=""><figcaption><p>Managed Clusters</p></figcaption></figure>

#### Managed Clusters Details

Details page contains the `Risk` and `Exposure Point` of the managed cluster and the `Information` pane.

{% hint style="info" %}
You can analyze the object in the [Graph](/forestall/visualize/visualize.md) by clicking the **Graph »** button next to the `Information` title.
{% endhint %}

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-38fbfdf5db515831dca976d8357bf7efb1fc4267%2Fmanged_Cluster_Details.PNG?alt=media" alt=""><figcaption><p>Managed Clusters Details</p></figcaption></figure>

#### Information

`Information Pane` contains `Details` and `Managed Identities` tabs.

A `Tier 0` or `Tier 2` badge on the right of the `Information` title shows the tier of the managed cluster.

#### Details

Details tab contains attributes below about the managed cluster.

| Attribute          | Description                                                                      |
| ------------------ | -------------------------------------------------------------------------------- |
| Name               | The display name of the managed cluster with tenant suffix                       |
| Location           | The Azure region where the AKS cluster is deployed                               |
| Kubernetes Version | The Kubernetes version running on the cluster (e.g., 1.29.7)                     |
| DNS Prefix         | The DNS prefix used for the cluster's API server FQDN                            |
| FQDN               | The fully qualified domain name of the cluster API server                        |
| Provisioning State | The provisioning state of the managed cluster (e.g., Succeeded)                  |
| Power State        | The power state of the cluster (e.g., Running, Stopped)                          |
| Enable RBAC        | Indicates whether Kubernetes role-based access control is enabled on the cluster |
| Node Count         | The number of nodes in the default node pool                                     |
| Tenant             | The tenant the managed cluster belongs to                                        |
| Resource Group     | The resource group the managed cluster is associated with                        |

#### Managed Identities

The `Managed Identities` tab lists Azure Active Directory service principals (managed identities) assigned to the managed cluster. A managed identity lets the AKS cluster (and the workloads inside it) authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this cluster, so these identities are part of its attack surface.

| Attribute    | Description                                                 |
| ------------ | ----------------------------------------------------------- |
| Name         | The display name of the managed identity with tenant suffix |
| Display Name | The display name of the service principal                   |
| Type         | The service principal type (e.g., ManagedIdentity)          |

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-2451dfc6bb038c6472b0849317841fb24ac983f4%2Fidentities_tab_managedClusters.PNG?alt=media" alt=""><figcaption><p>Managed Identities</p></figcaption></figure>