Merge pull request #128 from jloeffler7/explicitly-disable-storage-public-blob-access

Explicitly disable storage blob public access for workspace templates
This commit is contained in:
Mark Gray (MSFT) 2022-11-17 14:45:51 -08:00 committed by GitHub
commit 878ca149f9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 18 additions and 15 deletions

View File

@ -16,11 +16,12 @@ resource "azurerm_key_vault" "default" {
} }
resource "azurerm_storage_account" "default" { resource "azurerm_storage_account" "default" {
name = "st${var.name}${var.environment}" name = "st${var.name}${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard" account_tier = "Standard"
account_replication_type = "GRS" account_replication_type = "GRS"
allow_nested_items_to_be_public = false
} }
resource "azurerm_container_registry" "default" { resource "azurerm_container_registry" "default" {

View File

@ -21,11 +21,12 @@ resource "azurerm_key_vault" "default" {
} }
resource "azurerm_storage_account" "default" { resource "azurerm_storage_account" "default" {
name = "st${var.name}${var.environment}" name = "st${var.name}${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard" account_tier = "Standard"
account_replication_type = "GRS" account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules { network_rules {
default_action = "Deny" default_action = "Deny"

View File

@ -22,11 +22,12 @@ resource "azurerm_key_vault" "default" {
} }
resource "azurerm_storage_account" "default" { resource "azurerm_storage_account" "default" {
name = "st${var.name}${var.environment}" name = "st${var.name}${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard" account_tier = "Standard"
account_replication_type = "GRS" account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules { network_rules {
default_action = "Deny" default_action = "Deny"