Azure Container Registry¶

Deploys a hardened Azure Container Registry with Azure AD authentication and configurable SKU.

Summary¶

Registry for storing and distributing container images and Bicep module artifacts.

Module Information¶

Property	Value
Owner	platform-team
Support	Support
Version	1.1.0

Resource Types¶

Resource Type
`Microsoft.ContainerRegistry/registries`
`Microsoft.Insights/diagnosticSettings`

Usage¶

module registry 'br:geitbicepmodweucr01.azurecr.io/bicep/modules/container-registry/registry:1.1.0' = {
  name: 'registry'
  params: {
    // Required parameters
    par_registry_name: <string>
  }
}

Parameters¶

Name	Type	Description	Default
`par_admin_user_enabled`	`bool`	Whether to enable the admin user account. Disabled by default per WAF Security pillar.	`False`
`par_anonymous_pull_enabled`	`bool`	Whether to allow unauthenticated pull access. Enable only for public module registries.	`False`
`par_diagnostic_settings`	`array`	Optional. Diagnostic settings to attach to the registry. Each entry targets a Log Analytics workspace and enables at least one log or metric category; entries with neither are skipped (an empty diagnosticSettings is rejected by ARM).	``
`par_export_policy_status`	`string`	Export policy status. Disabled by default per WAF Security pillar (prevents artifact exfiltration). Enable only for a public module-distribution registry.	`disabled`
`par_location`	`string`	Azure region for the registry. Defaults to the resource group location.	`[resourceGroup().location]`
`par_public_network_access`	`string`	Whether the registry is accessible from the public internet. Disabled by default per WAF Security pillar.	`Disabled`
`par_registry_name`	`string`	Name of the Azure Container Registry. Must be globally unique.	required
`par_sku`	`string`	SKU tier for the registry. Premium required for zone redundancy, geo-replication, and private link.	`Standard`
`par_tags`	`object`	Resource tags applied to the registry.	``
`par_zone_redundancy`	`string`	Zone redundancy for the registry. Requires Premium SKU and a region that supports availability zones.	`Disabled`

Outputs¶

Name	Type	Description
`out_registry_id`	`string`	Resource ID of the deployed container registry.
`out_registry_login_server`	`string`	Login server URL of the deployed container registry.
`out_registry_name`	`string`	Name of the deployed container registry.

Versions¶

Pin an exact version. Ranges are not supported.

Version	Reference
`1.1.0` (latest)	`br/Euvic-Modules:container-registry/registry:1.1.0`