Description

Detects Azure Container Registries that do not have replication configured. Container registry replication is important for disaster recovery, high availability, and optimal performance in multi-region deployments. Without replication, organizations risk service disruption and increased latency for container image pulls.

Detection Strategy

• Scans all Azure Container Registries in the subscription

• Checks if the registry has any replication rules configured

• Reports a vulnerability if the registry's replication list is empty

• Captures the registry ID and replication configuration status in the vulnerability details