Azure Container Registry: Mitigating data exfiltration with dedicated data endpoints
Azure Container Registry announces dedicated data endpoints, enabling tightly scoped client firewall rules to specific registries, minimizing data exfiltration concerns. Pulling content from a registry involves two endpoints: Registry endpoint, often referred to as the login URL, used for authentication and content discovery. A command like docker pull contoso.azurecr.io/hello-world makes a REST request which authenticates…