{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/", "slug": "dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling", "url": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/" }, "title": "Generate confidential-container enforcement policy through the supported tooling", "summary": "Can a handwritten enforcement policy substitute for generated policy on confidential Azure Container Instances?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:24:23+00:00", "modified_at": "2026-09-10T02:08:04+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 242, "potentially_affected": "Use this check when preparing a confidential ACI container group. Confirm the deployment's current platform prerequisites and distinguish its generated enforcement artifact from a general description of the application's security requirements.", "dse_recommendation": "Preserve the generator inputs and output as one reviewed deployment artifact.", "primary_source": { "name": "Confidential containers on Azure Container Instances - Azure Container Instances | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/container-instances/container-instances-confidential-overview", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Confidential Azure Container Instances can run Linux containers in a hardware-backed trusted execution environment. Their confidential computing enforcement policy specifies which components may run in the container group, and the runtime enforces it. Microsoft requires the Azure CLI confcom extension to generate these policies; manually created policies are not supported. The extension takes an ARM template and produces an encoded policy for the group definition. Microsoft Learn.

\n

Applicability

\n

Use this check when preparing a confidential ACI container group. Confirm the deployment’s current platform prerequisites and distinguish its generated enforcement artifact from a general description of the application’s security requirements.

\n

DSE recommendation

\n

Preserve the generator inputs and output as one reviewed deployment artifact. Have the application owner identify the intended components in the template and review what the generated policy permits. Run the documented generation process after an approved component change instead of hand-editing the enforcement output to make deployment pass. Keep policy generation, deployment review and any separate attestation or key-release requirements explicit in the release record.

\n

Verification

\n

In an approved test deployment, verify the actual template, generator invocation and policy attached to the group. Exercise an allowed workload and the agreed prohibited-component case, retaining the enforcement outcome. If the proposed policy cannot be reproduced through the supported tool, leave the deployment unresolved. Do not treat memory encryption alone as evidence that the intended component policy was generated and applied.

\n

Official references

\n

Microsoft Learn: Confidential containers on Azure Container Instances.

", "content_text": "Source facts\nConfidential Azure Container Instances can run Linux containers in a hardware-backed trusted execution environment. Their confidential computing enforcement policy specifies which components may run in the container group, and the runtime enforces it. Microsoft requires the Azure CLI confcom extension to generate these policies; manually created policies are not supported. The extension takes an ARM template and produces an encoded policy for the group definition. Microsoft Learn.\nApplicability\nUse this check when preparing a confidential ACI container group. Confirm the deployment’s current platform prerequisites and distinguish its generated enforcement artifact from a general description of the application’s security requirements.\nDSE recommendation\nPreserve the generator inputs and output as one reviewed deployment artifact. Have the application owner identify the intended components in the template and review what the generated policy permits. Run the documented generation process after an approved component change instead of hand-editing the enforcement output to make deployment pass. Keep policy generation, deployment review and any separate attestation or key-release requirements explicit in the release record.\nVerification\nIn an approved test deployment, verify the actual template, generator invocation and policy attached to the group. Exercise an allowed workload and the agreed prohibited-component case, retaining the enforcement outcome. If the proposed policy cannot be reproduced through the supported tool, leave the deployment unresolved. Do not treat memory encryption alone as evidence that the intended component policy was generated and applied.\nOfficial references\nMicrosoft Learn: Confidential containers on Azure Container Instances.", "content_markdown": "## Source facts\n\nConfidential Azure Container Instances can run Linux containers in a hardware-backed trusted execution environment. Their confidential computing enforcement policy specifies which components may run in the container group, and the runtime enforces it. Microsoft requires the Azure CLI confcom extension to generate these policies; manually created policies are not supported. The extension takes an ARM template and produces an encoded policy for the group definition. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/container-instances/container-instances-confidential-overview).\n\n## Applicability\n\nUse this check when preparing a confidential ACI container group. Confirm the deployment’s current platform prerequisites and distinguish its generated enforcement artifact from a general description of the application’s security requirements.\n\n## DSE recommendation\n\nPreserve the generator inputs and output as one reviewed deployment artifact. Have the application owner identify the intended components in the template and review what the generated policy permits. Run the documented generation process after an approved component change instead of hand-editing the enforcement output to make deployment pass. Keep policy generation, deployment review and any separate attestation or key-release requirements explicit in the release record.\n\n## Verification\n\nIn an approved test deployment, verify the actual template, generator invocation and policy attached to the group. Exercise an allowed workload and the agreed prohibited-component case, retaining the enforcement outcome. If the proposed policy cannot be reproduced through the supported tool, leave the deployment unresolved. Do not treat memory encryption alone as evidence that the intended component policy was generated and applied.\n\n## Official references\n\n[Microsoft Learn: Confidential containers on Azure Container Instances](https://learn.microsoft.com/en-us/azure/container-instances/container-instances-confidential-overview)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/", "url": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Generate confidential-container enforcement policy through the supported tooling", "item": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/", "url": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/", "headline": "Generate confidential-container enforcement policy through the supported tooling", "description": "Can a handwritten enforcement policy substitute for generated policy on confidential Azure Container Instances?", "abstract": "Can a handwritten enforcement policy substitute for generated policy on confidential Azure Container Instances?", "articleBody": "Source facts\nConfidential Azure Container Instances can run Linux containers in a hardware-backed trusted execution environment. Their confidential computing enforcement policy specifies which components may run in the container group, and the runtime enforces it. Microsoft requires the Azure CLI confcom extension to generate these policies; manually created policies are not supported. The extension takes an ARM template and produces an encoded policy for the group definition. Microsoft Learn.\nApplicability\nUse this check when preparing a confidential ACI container group. Confirm the deployment’s current platform prerequisites and distinguish its generated enforcement artifact from a general description of the application’s security requirements.\nDSE recommendation\nPreserve the generator inputs and output as one reviewed deployment artifact. Have the application owner identify the intended components in the template and review what the generated policy permits. Run the documented generation process after an approved component change instead of hand-editing the enforcement output to make deployment pass. Keep policy generation, deployment review and any separate attestation or key-release requirements explicit in the release record.\nVerification\nIn an approved test deployment, verify the actual template, generator invocation and policy attached to the group. Exercise an allowed workload and the agreed prohibited-component case, retaining the enforcement outcome. If the proposed policy cannot be reproduced through the supported tool, leave the deployment unresolved. Do not treat memory encryption alone as evidence that the intended component policy was generated and applied.\nOfficial references\nMicrosoft Learn: Confidential containers on Azure Container Instances.", "datePublished": "2026-09-10T00:24:23+00:00", "dateModified": "2026-09-10T02:08:04+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-453-generate-confidential-container-enforcement-policy-through-the-supported-tooling/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Generate confidential-container enforcement policy through the supported tooling" }, "articleSection": [ "Cybersecurity", "Networks & Infrastructure" ], "keywords": [ "Cybersecurity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 242, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Confidential containers on Azure Container Instances - Azure Container Instances | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/container-instances/container-instances-confidential-overview" } } ] } }