Microsoft Defender for Cloud can stop unsafe software from being put into Azure Kubernetes Service (AKS). This keeps risky apps from running in the cloud environment.