Instantly share code, notes, and snippets.

Embed
What would you like to do?
Azure Resource Policy to restrict public-facing storage accounts
{
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
{
"field": "Microsoft.Storage/storageAccounts/networkAcls.defaultAction",
"equals": "Allow"
}
]
},
"then": {
"effect": "deny"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment