What you'll learn

Standing up an AKS cluster is easy; proving that only the intended people and workloads can reach it, and that a deployed application is both running and protected, is the harder and more important job.

In this course, Deploy Secure Workloads on AKS, you'll gain the ability to secure administrative and workload access to an AKS cluster and deploy a workload through a verified, least-privilege application path.

First, you'll explore how to restrict administrative access to the intended Microsoft Entra ID principals and Kubernetes permissions, and prove that allowed paths succeed while restricted ones are denied.

Next, you'll discover how to grant a workload only the Azure identity and resource permissions it needs, connect it to Azure without storing static secrets, and diagnose denied access and identity misconfiguration.

Finally, you'll learn how to establish a trusted image and deployment source, configure service exposure and ingress, apply identity, network, and application access controls, and deploy and verify a workload that reaches a protected, serving steady state.

When you're finished with this course, you'll have the skills and knowledge of securing AKS access and deploying protected workloads needed to run production AKS workloads with confidence that only the intended paths are open.