In Azure AKS is possible to disable the public FQDN of the API server, using the enablePrivateClusterPublicFQDN property. See the template in the official documentation.
The azure-native Pulumi SDK seems to be missing the option to configure this. Any thoughts on this? I have created an issue as well: github.com/pulumi/pulumi-azure-native/issues/1682