| Source | Azure Portal | ||||||||||
| Display name | Container registries should have local admin account disabled. | ||||||||||
| Id | dc921057-6b28-4fbe-9b83-f7bec05db6c2 | ||||||||||
| Version | 1.0.1 Details on versioning |
||||||||||
| Category | Container Registry Microsoft Learn |
||||||||||
| Description | Disable admin account for your registry so that it is not accessible by local admin. Disabling local authentication methods like admin user, repository scoped access tokens and anonymous pull improves security by ensuring that container registries exclusively require Azure Active Directory identities for authentication. Learn more at: https://aka.ms/acr/authentication. | ||||||||||
| Mode | Indexed | ||||||||||
| Type | BuiltIn | ||||||||||
| Preview | False | ||||||||||
| Deprecated | False | ||||||||||
| Effect | Default Audit Allowed Audit, Deny, Disabled |
||||||||||
| RBAC role(s) | none | ||||||||||
| Rule aliases | IF (1)
|
||||||||||
| Rule resource types | IF (1) Microsoft.ContainerRegistry/registries |
||||||||||
| Compliance | Not a Compliance control | ||||||||||
| Initiatives usage | none | ||||||||||
| History |
|
||||||||||
| JSON compare |
compare mode:
version left:
version right:
|
||||||||||
| JSON |
|