Azure Compliance ControlsAzure Kubernetes Service
Kubernetes clusters should use the Azure network plugin
This control checks if Azure CNI networking is enabled for Kubernetes cluster. Azure Kubernetes Clusters should use Azure CNI. Ensure AKS cluster has Azure CNI networking enabled.
What this control checks
AKS cluster networkPlugin must be azure (Azure CNI); other values fail.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_network_plugin_azure - Checkov Check:
CKV2_AZURE_29 - Powerpipe Control:
azure_compliance.control.kubernetes_cluster_network_plugin_azure - Azure Policy Definition:
46238e2f-3f6f-4589-9f3f-77bed4116e67
Last reviewed: 2026-10-13