last sync: 2025-Jun-13 17:56:51 Etc/UTC

Storage Accounts - Microsoft Azure Resource type
microsoft.storage/storageaccounts

Azure Resource Provider Resource provider (RP) - Microsoft Storage [Microsoft.Storage]
RP Microsoft.Storage
RP display name Microsoft Storage
Azure Resource Type
RP Resource types
Resource types: 78
Azure Policy Alias
RP aliases
RP aliases: 576
Azure Policy definition
RP Azure Policy
Azure Policy definitions: 143
if: 133
then.deployment: 23
then.details: 0
then.existenceCondition: 1
then.operations: 0
Azure RBAC Role Based Access Control
RP RBAC operations
RP RBAC operations: 212
RP RBAC operationType action: 66
RP RBAC operationType delete: 24
RP RBAC operationType read: 78
RP RBAC operationType write: 44
Azure RBAC Role definition
RP RBAC Roles & Operation actions
Unique RBAC Roles: 68
RBAC Roles with action operationType: 39
RBAC Roles with delete operationType: 20
RBAC Roles with read operationType: 60
RBAC Roles with write operationType: 29
Azure Application
RP related 1st party Service Principals
RP related 1st party Service Principals: 6
• Storage Resource Provider (appId: a6aa9161-5291-40bb-8c5c-923b567bee3b) [ JSON;CSV]
• Storage Data Management RP Prod FPA (appId: 3a3b6b87-84e2-4ad2-aa37-d76c339371a4) [ JSON;CSV]
• Azure Storage Insights Resource Provider (Azure Storage Discovery Resource Provider) (appId: b15f3d14-f6d1-4c0d-93da-d4136c97f006) [ JSON;CSV]
• Azure Storage Actions Resource Provider Service (appId: 7d3471e1-ec8b-4655-92f3-bb331362b5ae) [ JSON;CSV]
• Azure Storage (appId: e406a681-f3d4-42a8-90b6-c2b029497af1) [ JSON;CSV]
• Azure Files (appId: 69dda2a9-33ca-4ed0-83fb-a9b7b8973ff4) [ JSON;CSV]
All Azure RPs Microsoft Learn
AzResourceTypesAdvertizer (Microsoft only)
Azure Resource Type Resource type (RT) - Storage Accounts [microsoft.storage/storageaccounts]
RT information
RT microsoft.storage/storageaccounts
RT display name Storage Accounts
RT type only
(without RP)
storageAccounts
RT sub- Resource types sub-Resource types: 58
RT schema RT schema API versions: 26
All Microsoft Azure RTs AzResourceTypesAdvertizer
Aliases and Azure Policy
Azure Policy Alias
Aliases
aliases: 150
Azure Policy definition
Azure Policy
Azure Policy definitions: 113
if: 99
then.deployment: 21
then.details: 0
then.existenceCondition: 1
then.operations: 0
RBAC Operations and Roles & Roles related operation actions
Azure RBAC Role Based Access Control
RBAC operations
RBAC operations: 20
RBAC operationType action: 17
RBAC operationType delete: 1
RBAC operationType read: 1
RBAC operationType write: 1
Azure RBAC Role definition
RBAC Roles & Operation actions
Unique RBAC Roles: 45
RBAC Roles with action operationType: 7
RBAC Roles with delete operationType: 10
RBAC Roles with read operationType: 43
RBAC Roles with write operationType: 15
Capabilities & Locations
Azure Resource Diagnostic settings logs
Diagnostic logs
False
Azure Resource Diagnostic settings metrics
Diagnostic metrics
True
metrics
Azure Customer-managed key
Customer-managed key (CMK) [experimental]
True
Microsoft Learn
Enforce Encryption with a customer-managed key (CMK) at scale
Azure Managed identity
System-Assigned-Resource-Identity
True
Azure Resource Mover
Cross-ResourceGroup-Resource-Move
True
Azure Resource Mover
Cross-Subscription-Resource-Move
True
Azure Resource Tags
Tags
True
Azure Extension
Extension
False
Azure Private Endpoint
Private-Endpoint
True
Azure Private Endpoint location Azure Private Endpoint location
Supported Locations for Private-Endpoint
Supported Locations for Private-Endpoint: 45
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, chilecentral, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, jioindiawest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Non supported Locations for Private-Endpoint Non supported Locations for Private-Endpoint: 15
malaysiawest, eastus2euap, brazilus, eastusstg, centraluseuap, southcentralusstg, southafricawest, australiacentral2, jioindiacentral, francesouth, germanynorth, norwaywest, switzerlandwest, uaecentral, brazilsoutheast
Azure location
Location
True
Azure Resource type location Azure Resource type location
Locations
Locations: 45
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, chilecentral, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, koreacentral, koreasouth, malaysiawest, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Not locations Not locations: 55
asia, asiapacific, australia, australiacentral2, brazil, brazilsoutheast, brazilus, canada, centraluseuap, centralusstage, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, francesouth, germany, germanynorth, global, india, indonesia, israel, italy, japan, jioindiacentral, jioindiawest, korea, malaysia, mexico, newzealand, northcentralusstage, norway, norwaywest, poland, qatar, singapore, southafrica, southafricawest, southcentralusstage, southcentralusstg, southeastasiastage, spain, sweden, switzerland, switzerlandwest, taiwan, uae, uaecentral, uk, unitedstates, unitedstateseuap, westus2stage, westusstage
Assessment tooling
Azure Advisor
Azure Advisor
Azure Advisor recommendations: 17
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 recommendations: 6
DisasterRecovery [Low] Enable versioning for accidental modification and keep the number of versions below 1000
DisasterRecovery [Low] Enable point-in-time restore for GPv2 accounts to safeguard against data loss
DisasterRecovery [Medium] Enable Soft Delete to protect your data
HighAvailability [High] Ensure that storage accounts are zone or region redundant
MonitoringAndAlerting [Low] Monitor all blob storage accounts
Scalability [Low] Consider upgrading legacy storage accounts to v2 storage accounts
PSRule for Azure
PSRule for Azure
PSRule for Azure rules: 14
Operational Excellence [Awareness] Storage Account name must be valid
Operational Excellence [Awareness] Storage Accounts must use standard naming
Reliability [Important] Storage Account is available in a single zone
Reliability [Important] Use blob soft delete
Reliability [Important] Use container soft delete
Reliability [Important] Use soft delete on files shares
Security [Critical] Enable Microsoft Defender
Security [Critical] Malware Scanning
Security [Critical] Sensitive data threat detection
Security [Critical] Use secure protocols for Storage Accounts
Security [Important] Configure Azure Storage firewall
Security [Important] Disallow anonymous access to blob service
Security [Important] Enforce encrypted Storage connections
Security [Important] Use private blob containers
Azure Quick Review (AZQR)
Azure Quick Review (AZQR)
Azure Quick Review (AZQR) recommendations: 11
DisasterRecovery [Low] Storage Account should have inmutable storage versioning enabled
DisasterRecovery [Medium] Storage Account should have soft delete enabled
Governance [Low] Storage Account should have tags
Governance [Low] Storage Name should comply with naming conventions
HighAvailability [High] Ensure that storage accounts are zone or region redundant
HighAvailability [High] Storage should have a SLA
MonitoringAndAlerting [Low] Storage should have diagnostic settings enabled
Scalability [Low] Consider upgrading legacy storage accounts to v2 storage accounts
Security [High] Storage Account should use HTTPS only
Security [Low] Storage Account should enforce TLS >= 1.2
Security [Medium] Enable Azure Private Link service for storage accounts
Infrastructure as Code (IaC)
ARM (Azure Resource Manager)
ARM (Azure Resource Manager) templates
ARM (Azure Resource Manager) template API versions: 26
latest
Azure Bicep
Bicep templates
Bicep template API versions: 26
latest
Terraform
Terraform provider
Terraform providers: 7
security_center_storage_defender
storage_account
storage_account_customer_managed_key
storage_account_network_rules
storage_account_queue_properties
storage_account_static_website
storage_blob_inventory_policy
AzAPI Terraform
AzAPI Terraform templates
AzAPI Terraform template API versions: 26
latest
Pulumi
Pulumi provider
Pulumi providers: 1
storage/storageaccount
OpenTofu
OpenTofu provider
OpenTofu TF providers: 7
security_center_storage_defender
storage_account
storage_account_customer_managed_key
storage_account_network_rules
storage_account_queue_properties
storage_account_static_website
storage_blob_inventory_policy
Azure Verified Modules (AVM) Bicep Azure Verified Modules (AVM) Bicep
Azure Verified Modules (AVM) Bicep
Storage Account - Table
Azure Verified Modules (AVM) Terraform Azure Verified Modules (AVM) Terraform
Azure Verified Modules (AVM) Terraform
• GitHub: Storage Account
• Terraform registry: Storage Account
REST-API (Representational State Transfer - Application Programming Interface)
REST-API versions REST-API versions: 28
2025-01-01
2024-01-01
2023-05-01
2023-04-01
2023-01-01
2022-09-01
2022-05-01
2021-09-01
2021-08-01
2021-06-01
2021-05-01
2021-04-01
2021-02-01
2021-01-01
2020-08-01-preview
2019-06-01
2019-04-01
2018-11-01
2018-07-01
2018-03-01-preview
2018-02-01
2017-10-01
2017-06-01
2016-12-01
2016-05-01
2016-01-01
2015-06-15
2015-05-01-preview
REST-API version default 2024-01-01
API profiles API profiles: 5
2017-10-01;2019-03-01-hybrid
2017-10-01
2017-03-09-profile
2016-01-01;2018-06-01-profile
2016-01-01;2018-03-01-hybrid
Resource naming
Azure Naming Tool
Azure Naming Tool
The Azure Naming Tool was created to help administrators define and manage their naming conventions, while providing a simple interface for users to generate a compliant name.
Resource naming details
[
  {
    "property": "VM Storage Account",
    "ShortName": "stvm",
    "scope": "global",
    "lengthMin": "3",
    "lengthMax": "24",
    "validText": "Lowercase letters and numbers.",
    "invalidText": "",
    "invalidCharacters": "",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": "",
    "invalidCharactersConsecutive": "",
    "regx": "^[a-z0-9]{3,24}$",
    "staticValues": ""
  },
  {
    "property": "",
    "ShortName": "st",
    "scope": "global",
    "lengthMin": "3",
    "lengthMax": "24",
    "validText": "Lowercase letters and numbers.",
    "invalidText": "",
    "invalidCharacters": "",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": "",
    "invalidCharactersConsecutive": "",
    "regx": "^[a-z0-9]{3,24}$",
    "staticValues": ""
  }
]