Skip to content

Commit 9d7824b

Browse files
committed
Remove future promises
1 parent 4688d4f commit 9d7824b

File tree

2 files changed

+0
-10
lines changed

2 files changed

+0
-10
lines changed

articles/defender-for-cloud/defender-for-storage-malware-scan.md

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -57,13 +57,6 @@ When Malware Scanning is enabled, the following actions automatically take place
5757

5858
- To scan your data, the Malware Scanning service requires access to your data. During service enablement, a new Data Scanner resource called **StorageDataScanner** is created in your Azure subscription and assigned with a system managed identity. This resource is granted **Blob data owner** role to access and change your data for Malware Scanning and Sensitive Data Discovery.
5959

60-
> [!NOTE]
61-
> To improve granularity of permissions, the "Blob data owner" role will be replaced by a dedicated built-in role in an upcoming release, which will include the following permissions:
62-
> - "Microsoft.Storage/storageAccounts/blobServices/containers/read"
63-
> - "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
64-
> - “Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write”
65-
> - “Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read”
66-
6760
In case your storage account **Networking configuration** is set to **Enable Public network access from selected virtual networks and IP addressed**, the **StorageDataScanner** resource is added to the **Resource instances** section under storage account **Networking** configuration to allow access to scan your data.
6861

6962
In case you're enabling Malware Scanning on the subscription level, a new resource Security Operator resource called **StorageAccounts/securityOperators/DefenderForStorageSecurityOperator** is created in your Azure subscription and assigned with a system managed identity. This resource is used to enable and repairer Defender for Storage and Malware Scanning configuration on existing storage account in addition to check for new storage accounts created in the subscription to be enabled. This resource has role assignments that include the [specific permissions](#prerequisites) needed to enable Malware Scanning.

articles/storage/common/azure-defender-storage-configure.md

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -121,9 +121,6 @@ If you want to disable the plan, toggle the status button to **Off** for the Sto
121121

122122
### Enable and configure at scale with an Azure built-in policy
123123

124-
> [!NOTE]
125-
> The built-in policies of the new plan will be available on April 1st.
126-
127124
To enable and configure Defender for Storage at scale with an Azure built-in policy to ensure that consistent security policies are applied across all existing and new storage accounts within the subscriptions, follow these steps:
128125

129126
1. Sign in to the [Azure portal](https://portal.azure.com/) and navigate to the Policy dashboard.

0 commit comments

Comments
 (0)