Securing the Cloud Transition for Windows Applications on AKS

## Executive Summary Aqua Security and Microsoft have enabled automated deployment of Aqua Windows Enforcers on AKS Windows nodes running the containerd runtime via a VMSS-extension allowlisting; the Enforcers deliver runtime protections (block container exec, real-time malware protection, file integrity monitoring, read-only/volume controls), image and host scanning, and policy/assurance enforcement to help secure Windows containers during the Dockershim-to-containerd transition.