Azure Compliance ControlsAzure Container Registry
Container registries should have the quarantine policy enabled
Ensure container registry quarantine policy is enabled. This control is non-compliant if quarantine policy is disabled. Checkov CKV_AZURE_166 inspects `quarantine_policy_enabled` on `azurerm_container_registry`.
What this control checks
Container registry quarantine policy must be enabled; disabled is non-compliant.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
container_registry_quarantine_policy_enabled - Checkov Check:
CKV_AZURE_166 - Powerpipe Control:
azure_compliance.control.container_registry_quarantine_policy_enabled
Last reviewed: 2026-10-11