1.4. Recommended Next Steps (Optional)

Now that your installation is complete, here are a few steps you can follow to enhance the protection of your Azure cloud resources.

1.4.1. Set Allowed Container Images

The inoQulate solution uses Container Images from the pqceepub.azurecr.io repository, and you are recommended to create an Azure Policy to audit that the inoQulate AKS cluster is only using images from pqceepub.azurecr.io.

Microsoft Defender for Cloud may recommend your Azure resources to only deploy images from allowed registries, hence you are recommended to configure this in your Microsoft Defender for Cloud settings.

1.4.2. Restrict Kubernetes API Access

It is a good practice to restrict the Kubernetes API access to only the administrator.

1. In the Azure portal, enter Kubernetes Services in the search box. Select Kubernetes Services.

2. Click inoQulate.

3. In the left side bar, under the Section Settings, click Networking.

4. Click Manage.

5. Tick Set authorized IP ranges and fill in the Administrator’s IP Address.

6. Click Save.