Merge pull request #128 from jloeffler7/explicitly-disable-storage-public-blob-access

Explicitly disable storage blob public access for workspace templates
This commit is contained in:
Mark Gray (MSFT) 2022-11-17 14:45:51 -08:00 committed by GitHub
commit 878ca149f9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 18 additions and 15 deletions

View File

@ -21,6 +21,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard"
account_replication_type = "GRS"
allow_nested_items_to_be_public = false
}
resource "azurerm_container_registry" "default" {

View File

@ -26,6 +26,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard"
account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules {
default_action = "Deny"

View File

@ -27,6 +27,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard"
account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules {
default_action = "Deny"