| Source | Azure Portal | ||||||||||
| Display name | Container registries should have anonymous authentication disabled. | ||||||||||
| Id | 9f2dea28-e834-476c-99c5-3507b4728395 | ||||||||||
| Version | 1.0.0 Details on versioning |
||||||||||
| Category | Container Registry Microsoft Learn |
||||||||||
| Description | Disable anonymous pull for your registry so that data is not accessible by unauthenticated user. Disabling local authentication methods like admin user, repository scoped access tokens and anonymous pull improves security by ensuring that container registries exclusively require Azure Active Directory identities for authentication. Learn more at: https://aka.ms/acr/authentication. | ||||||||||
| Mode | Indexed | ||||||||||
| Type | BuiltIn | ||||||||||
| Preview | False | ||||||||||
| Deprecated | False | ||||||||||
| Effect | Default Audit Allowed Audit, Deny, Disabled |
||||||||||
| RBAC role(s) | none | ||||||||||
| Rule aliases | IF (1)
|
||||||||||
| Rule resource types | IF (1) Microsoft.ContainerRegistry/registries |
||||||||||
| Compliance | Not a Compliance control | ||||||||||
| Initiatives usage |
|
||||||||||
| History |
|
||||||||||
| JSON compare | n/a | ||||||||||
| JSON |
|