| Source | Azure Portal | |||||||||||||||
| Display name | Container registries should have exports disabled | |||||||||||||||
| Id | 524b0254-c285-4903-bee6-bb8126cde579 | |||||||||||||||
| Version | 1.0.0 Details on versioning |
|||||||||||||||
| Category | Container Registry Microsoft Learn |
|||||||||||||||
| Description | Disabling exports improves security by ensuring data in a registry is accessed solely via the dataplane ('docker pull'). Data cannot be moved out of the registry via 'acr import' or via 'acr transfer'. In order to disable exports, public network access must be disabled. Learn more at: https://aka.ms/acr/export-policy. | |||||||||||||||
| Mode | Indexed | |||||||||||||||
| Type | BuiltIn | |||||||||||||||
| Preview | False | |||||||||||||||
| Deprecated | False | |||||||||||||||
| Effect | Default Audit Allowed Audit, Deny, Disabled |
|||||||||||||||
| RBAC role(s) | none | |||||||||||||||
| Rule aliases | IF (2)
|
|||||||||||||||
| Rule resource types | IF (1) Microsoft.ContainerRegistry/registries |
|||||||||||||||
| Compliance | Not a Compliance control | |||||||||||||||
| Initiatives usage | none | |||||||||||||||
| History |
|
|||||||||||||||
| JSON compare | n/a | |||||||||||||||
| JSON |
|