For the complete documentation index, see llms.txt. This page is also available as Markdown.

Managed Clusters

Open Unified Identities › Resources, filter Providers to Azure Resource Management › Managed Cluster, then select a row to open its details. Managed clusters are Azure Kubernetes Service (AKS) clusters.

Managed Clusters

Managed Clusters Details

Details page contains the Risk and Exposure Point of the managed cluster and the Information pane.

You can analyze the object in the Graph by clicking the Graph » button next to the Information title.

Managed Clusters Details

Information

Information Pane contains Details and Managed Identities tabs.

A Tier 0 or Tier 2 badge on the right of the Information title shows the tier of the managed cluster.

Details

Details tab contains attributes below about the managed cluster.

Attribute
Description

Name

The display name of the managed cluster with tenant suffix

Location

The Azure region where the AKS cluster is deployed

Kubernetes Version

The Kubernetes version running on the cluster (e.g., 1.29.7)

DNS Prefix

The DNS prefix used for the cluster's API server FQDN

FQDN

The fully qualified domain name of the cluster API server

Provisioning State

The provisioning state of the managed cluster (e.g., Succeeded)

Power State

The power state of the cluster (e.g., Running, Stopped)

Enable RBAC

Indicates whether Kubernetes role-based access control is enabled on the cluster

Node Count

The number of nodes in the default node pool

Tenant

The tenant the managed cluster belongs to

Resource Group

The resource group the managed cluster is associated with

Managed Identities

The Managed Identities tab lists Azure Active Directory service principals (managed identities) assigned to the managed cluster. A managed identity lets the AKS cluster (and the workloads inside it) authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this cluster, so these identities are part of its attack surface.

Attribute
Description

Name

The display name of the managed identity with tenant suffix

Display Name

The display name of the service principal

Type

The service principal type (e.g., ManagedIdentity)

Managed Identities

Last updated

Was this helpful?