Ensure locks are enabled for Azure Container Registry (ACR), Failure to do so exposes Azure container registry to unauthorized access. This might compromises integrity of application which is relying on ACR and unauthorized individuals could gain access to sensitive container images, leading to potential misuse or unauthorized modifications.
In Azure Console -
In Terraform -
References:
https://learn.microsoft.com/en-us/azure/container-registry/container-registry-image-lock
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/container_registry
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/management_lock