Policy: Azure > Container Registry > Registry > Public Network Access

Define the Public Network Access settings required for Azure > Container Registry > Registry.

The Public Network Access policy determines whether the public network access for Azure Container Registry should be Enabled or Disabled.

When public network access is disabled, the Container Registry can only be accessed through private endpoints. This provides enhanced security by preventing public internet access to the registry.

Targets

This policy targets the following resource types:

Azure > Container Registry > Registry

Controls

Setting this policy configures this control:

Azure > Container Registry > Registry > Public Network Access

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Enabled` `Check: Disabled` `Enforce: Enabled` `Enforce: Disabled`
Examples [YAML]	`Check: Enabled`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/azure-containerregistry#/policy/types/registryPublicNetworkAccess

GraphQL

query policyType(id: "tmod:@turbot/azure-containerregistry#/policy/types/registryPublicNetworkAccess") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-containerregistry#/policy/types/registryPublicNetworkAccess'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-containerregistry#/policy/types/registryPublicNetworkAccess'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-containerregistry#/policy/types/registryPublicNetworkAccess"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-containerregistry#/policy/types/registryPublicNetworkAccess"