Tips-Of-Mine/terraform-azure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #128 from jloeffler7/explicitly-disable-storage-public-blob-access

Browse Source 
Explicitly disable storage blob public access for workspace templates
This commit is contained in:
Mark Gray (MSFT) 2022-11-17 14:45:51 -08:00 committed by GitHub
commit 878ca149f9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 18 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
quickstart/101-machine-learning/workspace.tf
View File

@ -21,6 +21,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard" account_tier = "Standard"
account_replication_type = "GRS" account_replication_type = "GRS"
allow_nested_items_to_be_public = false
} }
resource "azurerm_container_registry" "default" { resource "azurerm_container_registry" "default" {

1
quickstart/202-machine-learning-moderately-secure-existing-VNet/workspace.tf
View File

@ -26,6 +26,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard" account_tier = "Standard"
account_replication_type = "GRS" account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules { network_rules {
default_action = "Deny" default_action = "Deny"

1
quickstart/301-machine-learning-hub-spoke-secure/workspace.tf
View File

@ -27,6 +27,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard" account_tier = "Standard"
account_replication_type = "GRS" account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules { network_rules {
default_action = "Deny" default_action = "Deny"