Skill: krishnakumarmahadevan-cmd/toolweb-azure-aks-hardening (version 1.0.0)

--- name: CIS Azure AKS Hardening Tool description: Generates CIS v1.8.0 compliant Azure Kubernetes Service (AKS) configurations for security hardening. --- # Overview The CIS Azure AKS Hardening Tool is a specialized API that automates the generation of security-hardened Azure Kubernetes Service (AKS) configurations aligned with CIS Benchmarks v1.8.0. This tool eliminates manual hardening efforts by producing validated, compliance-ready configurations tailored to your specific security requirements. The tool enables DevSecOps engineers, cloud architects, and security teams to rapidly deploy AKS clusters that meet stringent security standards. It accepts flexible hardening options, processes them against CIS best practices, and returns production-ready configuration outputs. Whether you're managing a single cluster or an enterprise fleet, this tool ensures consistent, auditable security postures across your Kubernetes infrastructure on Azure. Ideal users include organizations requiring CIS compliance, enterprises undergoing security audits, teams building security-as-code pipelines, and cloud teams seeking to reduce manual hardening overhead. ## Usage ### Sample Request Generate a hardened AKS cluster configuration with specific security controls enabled: ```json { "sessionId": "sess-azure-hardening-2024-001", "hardeningOptions": { "apiServer": ["audit-logging", "authorization-mode-rbac"], "kubelet": ["read-only-port-disabled", [REDACTED_SECRET]], "networking": ["network-policies-enabled", "service-accounts-isolated"], "compliance": ["cis-v1.8.0"] }, "userId": "user-secteam-123", "timestamp": "2024-01-15T10:30:00Z" } ``` ### Sample Response ```json { "status": "success", "sessionId": "sess-azure-hardening-2024-001", "hardenerVersion": "1.0.0", "cisVersion": "1.8.0", "configurations": { "apiServer": { "audit-logging": { "enabled": true, "parameters": { "policy": "advanced", "maxAge": 30, "maxBackup": 10, "maxSize": 100 } }, "authorization-mode-rbac": { "enabled": true, "modes": ["RBAC"] } }, "kubelet": { "read-only-port-disabled": { "enabled": true, "readOnlyPort": 0 }, [REDACTED_SECRET]: { "enabled": true, "timeoutSeconds": 5400 } }, "networking": { "network-policies-enabled": { "enabled": true, "provider": "azure" }, "service-accounts-isolated": { "enabled": true } } }, "complianceScore": 94.5, "warnings": [], "recommendations": [ "Enable Pod Security Standards for additional defense-in-depth", "Implement network policies for all namespaces" ], "generatedAt": "2024-01-15T10:30:15Z" } ``` ## Endpoints ### POST /api/aks/generate Generates CIS v1.8.0 compliant AKS hardening configurations based on provided options. **Method:** `POST` **Path:** `/api/aks/generate` **What it does:** Processes a hardening request containing security control options and returns a complete, validated AKS configuration that meets CIS Benchmarks v1.8.0 standards. **Parameters:** | Name | Type | Required | Description | |------|------|----------|-------------| | hardeningOptions | object | Yes | Key-value mapping where keys are control categories (e.g., "apiServer", "kubelet", "networking") and values are arrays of specific hardening controls to enable | | sessionId | string | Yes | Unique session identifier for tracking and auditing the hardening request | | userId | string | No | Optional user identifier for attribution and audit logs | | timestamp | string | No | ISO 8601 formatted timestamp of the request (e.g., "2024-01-15T10:30:00Z") | **Response (200):** Returns a JSON object containing: - `status`: Operation status ("success" or "error") - `sessionId`: Echo of the request session ID - `hardenerVersion`: API version used - `cisVersion`: CIS Benchmark version applied (1.8.0) - `configurations`: Nested object with hardened settings organized by control category - `complianceScore`: Numeric score (0-100) indicating compliance level - `warnings`: Array of non-critical alerts - `recommendations`: Array of suggested additional security measures - `generatedAt`: Timestamp when configuration was generated **Response (422):** Validation error response containing: - `detail`: Array of validation errors with `loc` (field location), `msg` (error message), and `type` (error classification) --- ### GET / Root endpoint health check and API information. **Method:** `GET` **Path:** `/` **What it does:** Returns basic API information and service status. **Parameters:** None **Response (200):** Returns JSON object with API metadata and health status. ## Pricing | Plan | Calls/Day | Calls/Month | Price | |------|-----------|-------------|-------| | Free | 5 | 50 | Free | | Developer | 20 | 500 | $39/mo | | Professional | 200 | 5,000 | $99/mo | | Enterprise | 100,000 | 1,000,000 | $299/mo | ## About ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube. - [toolweb.in](https://toolweb.in) - [portal.toolweb.in](https://portal.toolweb.in) - [hub.toolweb.in](https://hub.toolweb.in) - [toolweb.in/openclaw/](https://toolweb.in/openclaw/) - [rapidapi.com/user/mkrishna477](https://rapidapi.com/user/mkrishna477) - [youtube.com/@toolweb-009](https://youtube.com/@toolweb-009) ## References - **Kong Route:** https://api.mkkpro.com/hardening/azure-aks - **API Docs:** https://api.mkkpro.com:8149/docs

path: openapi.json
content: {
  "openapi": "3.1.0",
  "info": {
    "title": "CIS Azure AKS Hardening Tool",
    "description": "Generates CIS v1.8.0 compliant AKS configurations",
    "version": "1.0.0"
  },
  "paths": {
    "/api/aks/generate": {
      "post": {
        "summary": "Generate Hardening",
        "operationId": "generate_hardening_api_aks_generate_post",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/HardeningRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          },
          "422": {
            "description": "Validation Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/HTTPValidationError"
                }
              }
            }
          }
        }
      }
    },
    "/": {
      "get": {
        "summary": "Root",
        "operationId": "root__get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "HTTPValidationError": {
        "properties": {
          "detail": {
            "items": {
              "$ref": "#/components/schemas/ValidationError"
            },
            "type": "array",
            "title": "Detail"
          }
        },
        "type": "object",
        "title": "HTTPValidationError"
      },
      "HardeningRequest": {
        "properties": {
          "hardeningOptions": {
            "additionalProperties": {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "type": "object",
            "title": "Hardeningoptions"
          },
          "sessionId": {
            "type": "string",
            "title": "Sessionid"
          },
          "userId": {
            "title": "Userid"
          },
          "timestamp": {
            "type": "string",
            "title": "Timestamp"
          }
        },
        "type": "object",
        "required": [
          "hardeningOptions",
          "sessionId"
        ],
        "title": "HardeningRequest"
      },
      "ValidationError": {
        "properties": {
          "loc": {
            "items": {
              "anyOf": [
                {
                  "type": "string"
                },
                {
                  "type": "integer"
                }
              ]
            },
            "type": "array",
            "title": "Location"
          },
          "msg": {
            "type": "string",
            "title": "Message"
          },
          "type": {
            "type": "string",
            "title": "Error Type"
          }
        },
        "type": "object",
        "required": [
          "loc",
          "msg",
          "type"
        ],
        "title": "ValidationError"
      }
    }
  }
}

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)