diff --git a/src/infrastructure/acr/main.bicep b/src/infrastructure/acr/main.bicep
index 002ffb5..1537f2e 100644
--- a/src/infrastructure/acr/main.bicep
+++ b/src/infrastructure/acr/main.bicep
@@ -16,19 +16,25 @@ resource acrResource 'Microsoft.ContainerRegistry/registries@2021-06-01-preview'
   }
   properties: {
     adminUserEnabled: true
-    policies: acrSku == 'Premium' ? {
-      quarantinePolicy: {
-        status: 'enabled'
-      }
-      trustPolicy: {
-        status: 'enabled'
-        type: 'Notary'
-      }
-      retentionPolicy: {
-        status: 'enabled'
-        days: 30
-      }
-    } : {}
+    publicNetworkAccess: 'Disabled'
+    networkRuleSet: acrSku == 'Premium' ? {
+      defaultAction: 'Deny'
+    } : null
+    policies: acrSku == 'Premium'
+      ? {
+          quarantinePolicy: {
+            status: 'enabled'
+          }
+          trustPolicy: {
+            status: 'enabled'
+            type: 'Notary'
+          }
+          retentionPolicy: {
+            status: 'enabled'
+            days: 30
+          }
+        }
+      : {}
   }
 }