A contractor tries to add API server authorized IP ranges to an AKS cluster that is already private. What should the security engineer explain?
Select an answer to reveal the explanation.
Short Explanation
Private cluster or authorized IP ranges—pick a lane. Stacking authorized ranges on an already-private API server isn’t a thing; those ranges only fence a public control plane.
Full Explanation
AKS API server authorized IP ranges apply to clusters with a public API server. They are mutually exclusive with the private-cluster isolation model and cannot be combined once the API server has no public endpoint. Operators must pick one approach: private cluster for no public API, or authorized ranges to constrain a public API. Treating them as mandatory layers on each other is incorrect.