AKS cluster has network policy enabled

# Enable network policy on AKS
resource "azurerm_kubernetes_cluster" "<example_resource_name>" {
  name                = "<example_resource_name>"
  location            = "<LOCATION>"
  resource_group_name = "<RESOURCE_GROUP>"
  dns_prefix          = "<example_dns_prefix>"

  default_node_pool {
    name       = "system"
    node_count = 1
    vm_size    = "Standard_DS2_v2"
  }

  identity {
    type = "SystemAssigned"
  }

  network_profile {
    network_plugin = "azure"
    network_policy = "calico" # Critical: enables AKS network policy
  }
}

// Enable network policy on AKS
param location string = resourceGroup().location

resource aks 'Microsoft.ContainerService/managedClusters@2024-05-01' = {
  name: '<example_resource_name>'
  location: location
  dnsPrefix: '<example_dns_prefix>'
  identity: { type: 'SystemAssigned' }
  agentPoolProfiles: [
    {
      name: 'systempool'
      vmSize: 'Standard_DS2_v2'
      count: 1
    }
  ]
  networkProfile: {
    networkPlugin: 'azure'
    networkPolicy: 'calico' // Critical: enables AKS network policy enforcement
  }
}