Mini Demo: Need a private registry not exposed to the internet, but still want PaaS? Try ACR VNet & firewall rules to lock down your AKS cluster, CI/CD pipeline, or other resources like your development team.