Vasudeva Sanka enhanced security for the microsoft/AzureTRE repository by implementing private Azure Container Registry (ACR) access as the default, focusing on reducing public exposure of container images. He updated Terraform configurations and deployment scripts to enforce image pulls over Virtual Networks, ensuring that all registry access occurs within private network boundaries. Using skills in Azure, DevOps, and Terraform, Vasudeva introduced the disable_acr_public_access configuration, which supports compliance requirements and minimizes the attack surface for AzureTRE deployments. The work demonstrated a deep understanding of cloud security and infrastructure as code, addressing regulatory needs through thoughtful, targeted engineering within a short timeframe.