The harbor Azure Container Registry still has the admin user enabled and two long-lived passwords shared in chat. What should the security engineer do first for registry identity hygiene?
Select an answer to reveal the explanation.
Short Explanation
Two admin passwords in chat means the harbor registry still has the back-door account on. Disable ACR admin; people use Entra, pipelines use managed identity or tokens.
Full Explanation
The ACR admin user is a shared username/password back door intended for testing, not production identity. Disable the admin account and authenticate humans with Microsoft Entra identities and automation with managed identities or tokens. Key Vault key rotation for other resources does not remediate an enabled ACR admin account. Keeping or embedding admin passwords continues credential sprawl.