Forum Discussion
RyanStevenson
Mar 16, 2020Copper Contributor
Limit which storage accounts which can be written to for a subscription
Would like to have a feature where we can set a policy that only a specific list of storage accounts can be written to from a subscription. Example a VM within the virtual network no matter who is l...
Santosh Chandwani
Microsoft
Mar 25, 2020RyanStevenson you can control which storage accounts can be accessed at a virtual network level. You can configure a Service Endpoint policy for a VNet, that specifies the list of storage accounts to which data exfiltration is allowed. Please see Virtual network service endpoint policies for Azure Storage for details.