[Preview]: Control the use of Container Registry in a Virtual Enclave

Azure BuiltIn Policy Initiative (PolicySet)

Policy types

Policy states

Policy categories

Total Policies: 8
Builtin Policies: 8
Static Policies: 0

GA: 8

1 categories:

Container Registry: 8

Rows: 1-8 / 8

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Policy DisplayName

Policy Id

Category

Version

Versioning

Effect

Roles#

Roles

State

policy in AzUSGov

Configure container registries to disable anonymous authentication.

cced2946-b08a-44fe-9fd9-e4ed8a779897

Container Registry

1.0.0

1x
1.0.0

Default
Modify
Allowed
Modify, Disabled

Contributor

true

Configure Container registries to disable public network access

a3701552-92ea-433e-9d17-33b7f1208fc9

Container Registry

1.0.0

1x
1.0.0

Default
Modify
Allowed
Modify, Disabled

Contributor

true

Container registries should be encrypted with a customer-managed key

5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580

Container Registry

1.1.2

1x
1.1.2

Default
Audit
Allowed
Audit, Deny, Disabled

true

Container registries should have anonymous authentication disabled.

9f2dea28-e834-476c-99c5-3507b4728395

Container Registry

1.0.0

1x
1.0.0

Default
Audit
Allowed
Audit, Deny, Disabled

true

Container registries should have SKUs that support Private Links

bd560fc0-3c69-498a-ae9f-aa8eb7de0e13

Container Registry

1.0.0

1x
1.0.0

Default
Audit
Allowed
Audit, Deny, Disabled

true

Container registries should not allow unrestricted network access

d0793b48-0edc-4296-a390-4c75d1bdfd71

Container Registry

2.0.0

1x
2.0.0

Default
Audit
Allowed
Audit, Deny, Disabled

true

Container registries should use private link

e8eef0a8-67cf-4eb4-9386-14b0e78733d4

Container Registry

1.0.1

1x
1.0.1

Default
Audit
Allowed
Audit, Disabled

true

Public network access should be disabled for Container registries

0fdf0491-d080-4575-b627-ad0e843cba0f

Container Registry

1.0.0

1x
1.0.0

Default
Audit
Allowed
Audit, Deny, Disabled

true

Role

Role Id

#Policies

Policies

Contributor

b24988ac-6180-42a0-ab88-20f7382dd24c

Configure container registries to disable anonymous authentication., Configure Container registries to disable public network access

Date/Time (UTC ymd) (i)

Changes

2024-01-17 19:06:27

add Initiative b3fe25eb-cdc6-475f-96a5-04ac270f630d

{

displayName: "[Preview]: Control the use of Container Registry in a Virtual Enclave",
policyType: "BuiltIn",
description: "This initiative deploys Azure policies for Container Registry ensuring boundary protection of this resource while it operates within the logically separated structure of Azure Virtual Enclaves. https://aka.ms/VirtualEnclaves",
metadata: {3 items
- version: "1.0.0-preview",
- category: "VirtualEnclaves",
- preview: true
},
version: "1.0.0-preview",
policyDefinitions: [8 items
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryDisablePublicNetworkAccess",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9 Configure Container registries to disable public network access ,
  - definitionVersion: 1.*.*1.0.0
  },
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryShouldNotAllowUnrestrictedNetworkAccess",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71 Container registries should not allow unrestricted network access ,
  - definitionVersion: 2.*.*2.0.0
  },
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryAnonymousAuthenticationDisabled",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/9f2dea28-e834-476c-99c5-3507b4728395 Container registries should have anonymous authentication disabled. ,
  - definitionVersion: 1.*.*1.0.0
  },
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryConfiguredAnonymousAuthenticationDisabled",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/cced2946-b08a-44fe-9fd9-e4ed8a779897 Configure container registries to disable anonymous authentication. ,
  - definitionVersion: 1.*.*1.0.0
  },
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryShouldHaveSkuSupportForPrivateLinks",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13 Container registries should have SKUs that support Private Links ,
  - definitionVersion: 1.*.*1.0.0
  },
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryShouldHavePrivateLink",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4 Container registries should use private link ,
  - definitionVersion: 1.*.*1.0.1
  },
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryShouldHavePublicNetworkAccessDisabled",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f Public network access should be disabled for Container registries ,
  - definitionVersion: 1.*.*1.0.0
  },
- {3 items
  - policyDefinitionReferenceId: "ContainerRegistryShouldUseCmkForEncryption",
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580 Container registries should be encrypted with a customer-managed key ,
  - definitionVersion: 1.*.*1.1.2
  }
],
versions: [1 item
- "1.0.0-preview"
]

}