Azure Container Registry dedicated data endpoint is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_237
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

This rule checks whether dedicated data endpoints are enables in Azure. Dedicated data endpoints enhance security by directing data connections through private IPs within your virtual network. Disabled endpoints expose data to the public internet, increasing the risk of interception or breaches. Enabling dedicated data endpoints strengthens your security posture.

How to Fix

Resource: azurerm_container_registry

• Arguments: data_endpoint_enabled

Enable the dedicated data endpoints to limit data traffic to private IP addresses in your virtual network. [source,go]

resource "azurerm_container_registry" "example" { ...

• data_endpoint_enabled = true }

---