Azure_KubernatesService_3

Ensure Container Registry has locks

Description

When you deploy a container image to production, you might need an immutable container image. An immutable image is one that you can’t accidentally delete or overwrite.

Remediation

Use the az acr repository update command to set repository attributes so you can:

1. Lock an image version, or an entire repository

2. Protect an image version or repository from deletion, but allow updates.

3. Prevent read (pull) operations on an image version, or an entire repository.

4. For More Information: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-image-lock

Service

Other Security Considerations

Severity

High

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!