Storage-account shouldn't allow all traffic.

[jongio]

All of the details are here: Azure/azure-dev#2938

Creating this as a tracking item for this repo

[pamelafox]

I've confirmed that the reason we need to allow all traffic currently is for prepdocs.py to run locally. The app itself does not need it.

[pamelafox]

cc @tonybaloney

[tonybaloney]

This is included in #864

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this issue will be closed.

[pamelafox]

Since this was filed, we’ve added optional private networking and public access controls across resources (see PR #864) and documented a private deployment flow in docs/deploy_private.md. You can disable public network access on the storage account and use private endpoints/VPN for ingestion.

I’m going to close this as addressed.