[Storage] Support AllowedCopyScope (#17321)

Author: blueww

src/Storage/Storage.Management.Test/ScenarioTests/StorageAccountTests.cs

@@ -280,6 +280,13 @@ public void TestAzureStorageAccountWorm()
         public void TestAzureStorageLocalUserSftp()
         {
             TestRunner.RunTestScript("Test-AzureStorageLocalUserSftp");
+        }
+
+        [Fact]
+        [Trait(Category.AcceptanceType, Category.CheckIn)]
+        public void TestStorageAccountAllowedCopyScope()
+        {
+            TestRunner.RunTestScript("Test-StorageAccountAllowedCopyScope");
         }        
     }
 }

src/Storage/Storage.Management.Test/ScenarioTests/StorageAccountTests.ps1

@@ -2268,3 +2268,47 @@ function Test-AzureStorageLocalUserSftp
         Clean-ResourceGroup $rgname
     }
 }
+
+<#
+.SYNOPSIS
+Test Test-StorageAccountAllowedCopyScope
+.DESCRIPTION
+SmokeTest
+#>
+function Test-StorageAccountAllowedCopyScope
+{
+    # Setup
+    $rgname = Get-StorageManagementTestResourceName;
+
+    try
+    {
+        # Test
+        $stoname = 'sto' + $rgname;
+        $stotype = 'Standard_LRS';
+        $loc = Get-ProviderLocation ResourceManagement;
+        $kind = 'StorageV2'
+
+        New-AzResourceGroup -Name $rgname -Location $loc;
+        Write-Output ("Resource Group created")
+		
+		# new account
+        $loc = Get-ProviderLocation_Canary ResourceManagement;
+        New-AzStorageAccount -ResourceGroupName $rgname -Name $stoname -Location $loc -SkuName $stotype -AllowedCopyScope AAD
+
+        Retry-IfException { $global:sto = Get-AzStorageAccount -ResourceGroupName $rgname -Name $stoname; }
+        Assert-AreEqual "AAD" $sto.AllowedCopyScope;
+
+        # Update account
+        Set-AzStorageAccount -ResourceGroupName $rgname -Name $stoname -AllowedCopyScope PrivateLink
+
+        Retry-IfException { $global:sto = Get-AzStorageAccount -ResourceGroupName $rgname -Name $stoname; }
+        Assert-AreEqual "PrivateLink" $sto.AllowedCopyScope;
+
+        Remove-AzStorageAccount -Force -ResourceGroupName $rgname -Name $stoname;
+    }
+    finally
+    {
+        # Cleanup
+        Clean-ResourceGroup $rgname
+    }
+}

src/Storage/Storage.Management.Test/SessionRecords/Microsoft.Azure.Commands.Management.Storage.Test.ScenarioTests.StorageAccountTests/TestStorageAccountAllowedCopyScope.json

@@ -18,6 +18,9 @@
         - Additional information about change #1
 -->
 ## Upcoming Release
+* Supported create/upgrade storage account with AllowedCopyScope
+    -  `New-AzStorageAccount`
+    -  `Set-AzStorageAccount`
 
 ## Version 4.3.0
 * Supported download blob from managed disk account with Sas Uri and bearer token

src/Storage/Storage.Management/ChangeLog.md

@@ -71,6 +71,7 @@ public PSStorageAccount(StorageModels.StorageAccount storageAccount)
             this.ImmutableStorageWithVersioning = storageAccount.ImmutableStorageWithVersioning is null ? null : new PSImmutableStorageAccount(storageAccount.ImmutableStorageWithVersioning);
             this.EnableSftp = storageAccount.IsSftpEnabled;
             this.EnableLocalUser = storageAccount.IsLocalUserEnabled;
+            this.AllowedCopyScope = storageAccount.AllowedCopyScope;
         }
         public bool? AllowCrossTenantReplication { get; set; }
 
@@ -161,6 +162,7 @@ public PSStorageAccount(StorageModels.StorageAccount storageAccount)
         public string PublicNetworkAccess { get; set; }
 
         public PSImmutableStorageAccount ImmutableStorageWithVersioning { get; set; }
+        public string AllowedCopyScope { get; set; }
 
         public static PSStorageAccount Create(StorageModels.StorageAccount storageAccount, IStorageManagementClient client)
         {

src/Storage/Storage.Management/Models/PSStorageAccount.cs

@@ -302,6 +302,16 @@ ImmutabilityPeriodSinceCreationInDays State    AllowProtectedAppendWrites
 The command creates an account and enable account level immutability with versioning by '-EnableAccountLevelImmutability', then all the containers under this account will have object-level immutability enabled by default.
 The account is also created with a default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. 
 
+### Example 16: Create account with AllowedCopyScope as AAD 
+```
+PS C:\> $account = New-AzStorageAccount -ResourceGroupName "MyResourceGroup" -AccountName "mystorageaccount" -SkuName Standard_LRS  -Location centraluseuap -Kind StorageV2 -AllowedCopyScope AAD 
+
+PS C:\> $account.AllowedCopyScope
+AAD
+```
+
+The command creates account with AllowedCopyScope as AAD.
+
 ## PARAMETERS
 
 ### -AccessTier

src/Storage/Storage.Management/help/New-AzStorageAccount.md

@@ -394,6 +394,16 @@ True
 This command updates a Storage account by enable Sftp and localuser. 
 To run the command succssfully, the Storage account should already enable Hierarchical Namespace.
 
+### Example 21: Update a Storage account by set AllowedCopyScope as PrivateLink 
+```
+PS C:\> $account = Set-AzStorageAccount -ResourceGroupName "myresourcegroup" -AccountName "mystorageaccount" -AllowedCopyScope PrivateLink
+
+PS C:\> $account.AllowedCopyScope
+PrivateLink
+```
+
+The command updates a Storage account by set AllowedCopyScope as PrivateLink. 
+
 ## PARAMETERS
 
 ### -AccessTier

src/Storage/Storage.Management/help/Set-AzStorageAccount.md

@@ -9,7 +9,6 @@
 
   <PropertyGroup>
     <RootNamespace>Microsoft.WindowsAzure.Management.$(PsModuleName)$(AzTestAssemblySuffix)</RootNamespace>
-    <TargetFrameworks>netcoreapp2.1</TargetFrameworks>
   </PropertyGroup>
 
   <ItemGroup>