HIGH
Source
CloudSploit
ID
acr-cmk-encryption

ACR CMK Encryption

Ensure that Microsoft Azure Container registries have CMK encryption enabled.

A customer-managed key gives you the ownership to bring your own key in Azure Key Vault. When you enable a customer-managed key, you can manage its rotations, control the access and permissions to use it, and audit its use.

Create new container registry with Premium SKU and enable CMK encryption.