diff --git a/terraform/modules/azure/registry/main.tf b/terraform/modules/azure/registry/main.tf
index 3f34c73..63ea8ef 100644
--- a/terraform/modules/azure/registry/main.tf
+++ b/terraform/modules/azure/registry/main.tf
@@ -25,7 +25,7 @@ resource "azurerm_container_registry_scope_map" "acr_policy" {
   container_registry_name = azurerm_container_registry.acr.name
   resource_group_name     = data.azurerm_resource_group.rg.name
   actions = [
-    "*/content/read",
+    "repositories/*/content/read",
   ]
 }