Azure Compliance ControlsAzure Container Registry
Container registries should have the trust policy enabled
Ensure container registry trust policy is enabled. This control is non-compliant if trust policy is disabled. The Checkov check ensures that ACR uses signed/trusted images.
What this control checks
Fails if the container registry has the trust policy disabled
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
container_registry_trust_policy_enabled - Checkov Check:
CKV_AZURE_164 - Powerpipe Control:
azure_compliance.control.container_registry_trust_policy_enabled
Last reviewed: 2026-10-11