diff --git a/avm/res/container-service/managed-cluster/README.md b/avm/res/container-service/managed-cluster/README.md
index 6d612433456..ce201e37682 100644
--- a/avm/res/container-service/managed-cluster/README.md
+++ b/avm/res/container-service/managed-cluster/README.md
@@ -68,7 +68,9 @@ module managedCluster 'br/public:avm/res/container-service/managed-cluster:<vers
     // Non-required parameters
     disableLocalAccounts: true
     enableKeyvaultSecretsProvider: true
+    enableSecretRotation: true
     kedaAddon: true
+    kubernetesVersion: '1.28'
     location: '<location>'
     maintenanceConfiguration: {
       maintenanceWindow: {
@@ -90,6 +92,7 @@ module managedCluster 'br/public:avm/res/container-service/managed-cluster:<vers
     managedIdentities: {
       systemAssigned: true
     }
+    outboundType: 'managedNATGateway'
     publicNetworkAccess: 'Enabled'
     skuName: 'Automatic'
     webApplicationRoutingEnabled: true
@@ -133,9 +136,15 @@ module managedCluster 'br/public:avm/res/container-service/managed-cluster:<vers
     "enableKeyvaultSecretsProvider": {
       "value": true
     },
+    "enableSecretRotation": {
+      "value": true
+    },
     "kedaAddon": {
       "value": true
     },
+    "kubernetesVersion": {
+      "value": "1.28"
+    },
     "location": {
       "value": "<location>"
     },
@@ -163,6 +172,9 @@ module managedCluster 'br/public:avm/res/container-service/managed-cluster:<vers
         "systemAssigned": true
       }
     },
+    "outboundType": {
+      "value": "managedNATGateway"
+    },
     "publicNetworkAccess": {
       "value": "Enabled"
     },
diff --git a/avm/res/container-service/managed-cluster/main.json b/avm/res/container-service/managed-cluster/main.json
index 29500876b0b..6c40888e819 100644
--- a/avm/res/container-service/managed-cluster/main.json
+++ b/avm/res/container-service/managed-cluster/main.json
@@ -5,8 +5,8 @@
   "metadata": {
     "_generator": {
       "name": "bicep",
-      "version": "0.28.1.47646",
-      "templateHash": "6309836800313804859"
+      "version": "0.27.1.19265",
+      "templateHash": "18137628139682240871"
     },
     "name": "Azure Kubernetes Service (AKS) Managed Clusters",
     "description": "This module deploys an Azure Kubernetes Service (AKS) Managed Cluster.",
@@ -1842,8 +1842,8 @@
           "metadata": {
             "_generator": {
               "name": "bicep",
-              "version": "0.28.1.47646",
-              "templateHash": "14041521425406296021"
+              "version": "0.27.1.19265",
+              "templateHash": "17618545946010219594"
             },
             "name": "Azure Kubernetes Service (AKS) Managed Cluster Maintenance Configurations",
             "description": "This module deploys an Azure Kubernetes Service (AKS) Managed Cluster Maintenance Configurations.",
@@ -2039,8 +2039,8 @@
           "metadata": {
             "_generator": {
               "name": "bicep",
-              "version": "0.28.1.47646",
-              "templateHash": "6644048800784630485"
+              "version": "0.27.1.19265",
+              "templateHash": "17795163053989614827"
             },
             "name": "Azure Kubernetes Service (AKS) Managed Cluster Agent Pools",
             "description": "This module deploys an Azure Kubernetes Service (AKS) Managed Cluster Agent Pool.",
diff --git a/avm/res/container-service/managed-cluster/tests/e2e/automatic/main.test.bicep b/avm/res/container-service/managed-cluster/tests/e2e/automatic/main.test.bicep
index 1c710bc1626..b68e3a82429 100644
--- a/avm/res/container-service/managed-cluster/tests/e2e/automatic/main.test.bicep
+++ b/avm/res/container-service/managed-cluster/tests/e2e/automatic/main.test.bicep
@@ -41,7 +41,9 @@ module testDeployment '../../../main.bicep' = [
       location: resourceLocation
       disableLocalAccounts: true
       enableKeyvaultSecretsProvider: true
+      enableSecretRotation: true
       kedaAddon: true
+      kubernetesVersion: '1.28'
       maintenanceConfiguration: {
         maintenanceWindow: {
           schedule: {
@@ -62,6 +64,7 @@ module testDeployment '../../../main.bicep' = [
       managedIdentities: {
         systemAssigned: true
       }
+      outboundType: 'managedNATGateway'
       primaryAgentPoolProfile: [
         {
           name: 'systempool'