Security wants runtime security signals on Azure Container Instance…

Question

Security wants runtime security signals on Azure Container Instances groups that pull images from the harbor registry. Which monitoring product should the security engineer enable?

Accepted Answer

Enable Microsoft Defender for Containers coverage for ACI as the security-monitoring product for those container groups. — ACI pulling from the harbor registry still needs a security lookout. Turn on Defender for Containers for ACI—don’t pretend App Insights or a Servers plan on some VM covers those groups.

Answer

Enable Microsoft Defender for Servers plan catalog options on unrelated VMs and treat that as ACI coverage.

Answer

Add an Application Insights instrumentation key to each ACI YAML file as the primary security-monitoring control.

Answer

Authorize only ACR admin credentials in the ACI registry password fields and skip runtime security monitoring.

Security wants runtime security signals on Azure Container Instances groups that pull images from the harbor registry. Which monitoring product should the security engineer enable?

Short Explanation

Full Explanation