How do you make an AKS cluster's API server accessible only via a private IP address within the VNet?
- A Disable public load balancer
- B Enable Authorized IP Ranges
- C Enable Private Cluster (--enable-private-cluster) (correct answer)
- D Use Azure Firewall
Shortcut: --enable-private-cluster deploys the API server with a private IP only, accessible via Private Link. The API server FQDN resolves privately within the VNet.