Azure ACR enables anonymous image pulling misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_138
Category - Subcategory	IAM - Overly Permissive
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Disabling anonymous image pulling for your Azure Container Registry (ACR) can help improve the security of your registry. When anonymous image pulling is enabled, anyone can pull images from your registry without needing to authenticate or have authorization.

How to Fix

Resource: azurerm_container_registry

• Arguments: anonymous_pull_enabled [source,go]

---

resource "azurerm_container_registry" "ckv_unittest_pass_1" { name = "containerRegistry1" resource_group_name = azurerm_resource_group.rg.name location = azurerm_resource_group.rg.location sku = "Premium" anonymous_pull_enabled = false }