| Source | Azure Portal | ||||||||||||||||||
| Display name | Container registries should have anonymous authentication disabled. | ||||||||||||||||||
| Id | 9f2dea28-e834-476c-99c5-3507b4728395 | ||||||||||||||||||
| Version | 1.0.0 Details on versioning |
||||||||||||||||||
| Versioning |
Versions supported for Versioning: 1 1.0.0 Built-in Versioning [Preview] |
||||||||||||||||||
| Category | Container Registry Microsoft Learn |
||||||||||||||||||
| Description | Disable anonymous pull for your registry so that data is not accessible by unauthenticated user. Disabling local authentication methods like admin user, repository scoped access tokens and anonymous pull improves security by ensuring that container registries exclusively require Azure Active Directory identities for authentication. Learn more at: https://aka.ms/acr/authentication. | ||||||||||||||||||
| Cloud environments | AzureCloud = true AzureUSGovernment = true AzureChinaCloud = unknown |
||||||||||||||||||
| Available in AzUSGov | The Policy is available in AzureUSGovernment cloud. Version: '1.*.*' | ||||||||||||||||||
| Mode | Indexed | ||||||||||||||||||
| Type | BuiltIn | ||||||||||||||||||
| Preview | False | ||||||||||||||||||
| Deprecated | False | ||||||||||||||||||
| Effect | Default Audit Allowed Audit, Deny, Disabled |
||||||||||||||||||
| RBAC role(s) | none | ||||||||||||||||||
| Rule aliases | IF (1)
|
||||||||||||||||||
| Rule resource types | IF (1) Microsoft.ContainerRegistry/registries |
||||||||||||||||||
| Compliance | Not a Compliance control | ||||||||||||||||||
| Initiatives usage |
|
||||||||||||||||||
| History |
|
||||||||||||||||||
| JSON compare | n/a | ||||||||||||||||||
| JSON |
|