* [Blog](https://www.paloaltonetworks.com/blog) * [Cloud Security](https://www.paloaltonetworks.com/blog/cloud-security/) * [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/) * Prisma Cloud Supports Azu... # Prisma Cloud Supports Azure Linux Container Host for AKS [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fazure-linux-container-host-aks%2F) [](https://twitter.com/share?text=Prisma+Cloud+Supports+Azure+Linux+Container+Host+for+AKS&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fazure-linux-container-host-aks%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fazure-linux-container-host-aks%2F&title=Prisma+Cloud+Supports+Azure+Linux+Container+Host+for+AKS&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com/blog/cloud-security/azure-linux-container-host-aks/&ts=markdown) \[\](mailto:?subject=Prisma Cloud Supports Azure Linux Container Host for AKS) Link copied By [Derek Rogerson](https://www.paloaltonetworks.com/blog/author/derek-rogerson/?ts=markdown "Posts by Derek Rogerson") May 24, 2023 6 minutes [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown) [Cloud Workload Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection-platform/?ts=markdown) [Partners](https://www.paloaltonetworks.com/blog/cloud-security/category/partners/?ts=markdown) [Azure Kubernetes Service](https://www.paloaltonetworks.com/blog/tag/azure-kubernetes-service/?ts=markdown) [Azure Linux](https://www.paloaltonetworks.com/blog/tag/azure-linux/?ts=markdown) [Azure Linux container host](https://www.paloaltonetworks.com/blog/tag/azure-linux-container-host/?ts=markdown) [Containers](https://www.paloaltonetworks.com/blog/tag/containers/?ts=markdown) *Prisma Cloud helps accelerate time-to-market securely with our support for Azure Linux container host for Azure Kubernetes Service (AKS).* In our report on [The State of Cloud-Native Security (2023)](https://start.paloaltonetworks.com/state-of-cloud-native-security-2023.html), cloud practitioners reported technical complexity as the top-ranked cloud-native security concern, which they experienced as impeding their cloud security. With attacks on software supply chains on the rise and the complexity of software dependencies making cloud security more challenging than ever, now is the time to adopt a container-optimized host operating system to simplify and accelerate your workload security. With container-security optimization and acceleration in mind, Prisma Cloud by Palo Alto Networks is delighted to announce our support for container-optimized [Azure Linux by Microsoft](https://aka.ms/Azure-Linux-Blog-BUILD-2023). Azure Linux is an open-source container host created by Microsoft and optimized for Azure Kubernetes Service (AKS). It delivers simplified and enhanced Kubernetes container security for those customers who require high-level confidence in the hosts running their container workloads. Fully supported by Prisma Cloud at launch, Azure Linux container host for AKS has been designed to be lightweight in operations, so it includes only the essential packages necessary for container workloads. This results in accelerated uptime and also improved stability for customers using AKS. With Microsoft sourcing and verifying each package running with Azure Linux container host on AKS, customers can count on enhanced container operations with dependable components. Jim Perrin, Principal Program Manager, Microsoft Azure Linux said, "With Microsoft Azure Linux, customers see benefit from the value of having a secure, performant, and fully-native Azure Kubernetes Service (AKS) container host. Microsoft controls the supply chain for Azure Linux end to end, resulting in a more streamlined image tailored and optimized for AKS. Azure Linux provides a consistent Kubernetes experience throughout the developer and production lifecycle coupled with the level of support you expect from Microsoft." ## Prisma Cloud Seamlessly Supports Azure Linux Container Host for Azure Kubernetes Service ![Prisma Cloud offers code-to-cloud security for Azure resources and assets, including container security with Azure Linux container host for AKS.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/05/word-image-295153-1.png) Prisma Cloud offers code-to-cloud security for Azure resources and assets, including container security with Azure Linux container host for AKS. Our support of Azure Linux brings together cloud-native security capabilities from Prisma Cloud with reliable Azure Linux as a container host for Azure Kubernetes Service (AKS). This purpose-built Azure Linux container host uses a native AKS image to provide a single place for cloud teams to do all development, simplifying your security and operations. Container security is improved because the Microsoft-optimized operating system has specifically been designed with a smaller image size --- so the container host is high-performing and simplified with only the necessary set of packages needed to run container workloads. The result for customers is a reduced attack surface and helpful elimination of time-consuming patching and maintenance that's no longer needed due to the removal of unnecessary packages. Customers can look forward to the following benefits when they adopt Azure Linux: * **Optimized and validated to run in Azure** * **Harden supply chain security (through a standard Linux distribution)** * **Small and lean host OS for reduced attack surface (less dependencies)** * **Improved operational consistency** Since Prisma Cloud already protects workloads on Azure Kubernetes Service (AKS), any workload migrations to optimized Azure Linux is seamless for Prisma Cloud customers. Use Azure Linux container host for AKS with Prisma Cloud to enhance your Kubernetes security with additional consistency and reliability in Azure. ## Immediate Prisma Cloud Protections for Azure Kubernetes Service (AKS) Prisma Cloud by Palo Alto Networks helps you stay both secure and competitive by getting immediate adoption availability of the latest Microsoft Azure features, including support for newly released Azure Linux container-host for AKS. Prisma Cloud provides a "paved path" for customers to adopt comprehensive full-lifecycle visibility and full-stack security for Kubernetes deployments on AKS. Prisma Cloud security and operational benefits in Azure include: * **Visibility \& Control:** Gain cluster visibility and control over every deployment with complete assessments and risk posture scores of all your clusters, components, nodes, and containers --- all within a single pane of glass and with real-time stream processing of Kubernetes events. * **Integrated CI/CD Scanning:** Integrate automated vulnerability and compliance scanning --- with enforcement capabilities --- directly into CI/CD workflows for faster, secure, and scaled operations. * \*\*Policy \& Enforcement:\*\*Set simple rules to govern DevOps workflows and implement your policies through DevOps plugins, registry integrations, image trust, or third-party schemes like Open Policy Agent (OPA) to stop admission of vulnerable Kubernetes objects and privileged pods. * **Automated Threat Detection:** Automate incident detection and prevention based on model and threat indicators with continuous forensics for every container, cluster node and host in your environment. * **Web Application and API Security (WAAS):** Support for OWASP Top-10 protection, app-layer denial-of-service (DoS), API protection, bot risk management, and more. * **Compliance**: Implement the Kubernetes CIS Benchmarks anywhere you run Kubernetes with Prisma Cloud and 100+ built-in, customizable security policies covering configurations, communications, and more to ensure you're always compliant for any version of Kubernetes you run. ![Prisma Cloud comprehensive cloud-native protections in Microsoft Azure environments.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/05/word-image-295153-2.png) Prisma Cloud comprehensive cloud-native protections in Microsoft Azure environments. ## Prisma Cloud is Better Together with Microsoft Azure and AKS Prisma Cloud, together with Azure, can provide a comprehensive solution to secure and defend your Kubernetes environment against vulnerabilities and active threats. Our combined cloud security offerings give customers the broadest application protections and compliance coverage for containers, and full-lifecycle visibility and control. Prisma Cloud is also natively integrated into developer toolkits to further accelerate operations and secure cloud adoption. When you choose and adopt Prisma Cloud, together with Azure, you are choosing Palo Alto Networks as a dedicated partner with a deep commitment to immediately support new Azure services. As Jim Perrin reiterated regarding the Microsoft and Palo Alto Networks partnership, "Our collaboration with Prisma Cloud and Palo Alto Networks has provided invaluable feedback and enabled us to deliver Azure Linux to meet our mutual customers' needs. We look forward to the continued partnership as we bring new enhancements to Azure Linux in the future." ## Learn More Whether you're new to containers or a cloud-native veteran,[The Definitive Guide to Container Security](https://www.paloaltonetworks.com/resources/ebooks/container-security-definitive-guide?ts=markdown) is your essential resource for understanding, implementing and mastering security in a containerized environment. With in-depth insights and practical advice, this book-length guide empowers developers, DevOps, cloud teams and security professionals to effectively protect their cloud-native applications. And to learn more about the comprehensive Prisma Cloud security platform and its many benefits in your [Azure environment](https://www.paloaltonetworks.com/prisma/environments/azure?ts=markdown), download our [Prisma Cloud for Azure Datasheet](https://www.paloaltonetworks.com/resources/datasheets/prisma-cloud-for-microsoft-azure?ts=markdown). *** ** * ** *** ## Related Blogs ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud Workload Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection-platform/?ts=markdown), [Points of View](https://www.paloaltonetworks.com/blog/category/points-of-view/?ts=markdown) [#### What You Need to Know About Azurescape](https://www.paloaltonetworks.com/blog/2021/09/azurescape/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud Workload Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection-platform/?ts=markdown), [DevSecOps](https://www.paloaltonetworks.com/blog/cloud-security/category/devsecops/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/cloud-security/category/partners/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Prisma Cloud Automatically Secures Unprotected Cloud Workloads](https://www.paloaltonetworks.com/blog/2021/04/april-2021-release-prisma-cloud/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud Computing](https://www.paloaltonetworks.com/blog/category/cloud-computing-2/?ts=markdown), [Cloud Workload Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection-platform/?ts=markdown), [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity-2/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/category/partners/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/cloud-security/category/partners/?ts=markdown) [#### Prisma Cloud Secures Containerized Apps on AWS-Optimized Bottlerocket](https://www.paloaltonetworks.com/blog/cloud-security/secure-containerized-app-aws-bottlerocket/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud Posture Security](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-security-posture-management/?ts=markdown), [Cloud Workload Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection-platform/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/cloud-security/category/partners/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Prisma Cloud and VM-Series Help Protect Oracle Cloud Infrastructure](https://www.paloaltonetworks.com/blog/2021/02/cloud-protect-oracle-cloud/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud Workload Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection-platform/?ts=markdown), [DevSecOps](https://www.paloaltonetworks.com/blog/cloud-security/category/devsecops/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Prisma Cloud Further Extends Host and Container Security](https://www.paloaltonetworks.com/blog/2021/01/cloud-host-container-web-app-api-release/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/cloud-security/category/partners/?ts=markdown) [#### Experience Next-Generation Cloud Security at AWS re:Invent 2024](https://www.paloaltonetworks.com/blog/cloud-security/aws-reinvent-2024/) ### Subscribe to Cloud Security Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language