Azure Container Registry (ACR) not zone redundant misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_233
Category - Subcategory	Storage - Redundancy
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

This rule checks to ensure that the Azure Container Registry (ACR) is zone redundant, ensuring resource distribution across multiple zones within the same region. Zone redundancy is important as it guarantees high availability and resilience during zone-wide failures. Without zone redundancy, ACR may experience unavailability during zone-specific issues occur, disrupting services relying on it and potentially leading to substantial business disruptions.

How to Fix

Resource: azurerm_container_registry

• Arguments: zone_redundancy_enabled

To fix this issue, in your Azure Container Registry (ACR) resource, set the zone_redundancy_enabled attribute to true.

This code enables Azure Container Registry (ACR) zone redundancy, by configuring the zone_redundancy_enabledsetting to 'true'. ACR data will be replicated across different zones within the region, providing highavailability and durability. [source,go]

resource "azurerm_container_registry" "acr" { ... sku = "Premium" ... georeplications { ... zone_redundancy_enabled = true } }