Update infra/modules/container-registry.bicep

Abdul-Microsoft · Copilot · web-flow · commit a3f38b967c2c · 2026-04-22T12:12:32.000+05:30
Co-authored-by: Copilot &lt;175728472+Copilot@users.noreply.github.com&gt;
diff --git a/infra/modules/container-registry.bicep b/infra/modules/container-registry.bicep
@@ -61,7 +61,7 @@ module avmContainerRegistry 'br/public:avm/res/container-registry/registry:0.12.
         ]
       : null
     // WAF aligned configuration for Private Networking - Network access restrictions
-    // Network rule set features require Premium SKU; only set when private networking is enabled
+    // Network rule set features require Premium SKU; default action is always set ('Deny' for private networking, otherwise 'Allow'), while additional restrictions are only set when private networking is enabled
     networkRuleSetDefaultAction: enablePrivateNetworking ? 'Deny' : 'Allow'
     networkRuleSetIpRules: enablePrivateNetworking ? [] : null
     exportPolicyStatus: enablePrivateNetworking ? 'disabled' : null

Original file line number	Diff line number	Diff line change
`@@ -61,7 +61,7 @@ module avmContainerRegistry 'br/public:avm/res/container-registry/registry:0.12.`
`61`	`61`	`]`
`62`	`62`	`: null`
`63`	`63`	`// WAF aligned configuration for Private Networking - Network access restrictions`
`64`		`- // Network rule set features require Premium SKU; only set when private networking is enabled`
	`64`	`+ // Network rule set features require Premium SKU; default action is always set ('Deny' for private networking, otherwise 'Allow'), while additional restrictions are only set when private networking is enabled`
`65`	`65`	`networkRuleSetDefaultAction: enablePrivateNetworking ? 'Deny' : 'Allow'`
`66`	`66`	`networkRuleSetIpRules: enablePrivateNetworking ? [] : null`
`67`	`67`	`exportPolicyStatus: enablePrivateNetworking ? 'disabled' : null`