ARO Security Baseline / LZA

[ezYakaEagle442]

given the ARO LZA doc, may I suggest an update to include the egress lockdown, Managed Identities, BackUp with Velero, Gateway API, Key Vault, AGC, MS Defender for Containers through Azure Arc, Notary V2/signing container artifcats, etc.

[ezYakaEagle442]

Azure announced in 2023 :

After March 31, 2026, new virtual networks will default to creation of private subnets which can no longer use default outbound access connectivity.

Does it mean that AZO LZA should also add a NAT Gateway or Azure Firewall are mentioned in the VNet doc ?