Azure Container Registry (ACR) Does Not Have a Quarantine Policy Enabled misconfiguration detected i

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_166
Category - Subcategory	Storage - Permissions
Provider	AZURE
Severity	MEDIUM
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

The container image quarantine feature in Azure Container Registry enables you to take control over the distribution of images by quarantining them until they're verified. This is particularly important in supply chain security to ensure that only verified and scanned images are used.

This rule ensures that the quarantine policy is enabled for Azure Container Registry.

How to Fix

Resource: azurerm_container_registry

• Arguments: quarantine_policy_enabled [source,go]

---

resource "azurerm_container_registry" "example" { name = "exampleContainerRegistry" resource_group_name = azurerm_resource_group.example.name location = azurerm_resource_group.example.location sku = "Premium" admin_enabled = false

• quarantine_policy_enabled = true }

---