Skip to content

Commit ea1362f

Browse files
Update anonymous-read-access-configure.md
The storage account firewall will not block anonymous public access with any layer 7 inspection of the traffic. It will however block traffic if the source IP is not on the allowed list within the ACLs. This point was not clear and needed better definition.
1 parent 8a31709 commit ea1362f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/storage/blobs/anonymous-read-access-configure.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -174,7 +174,7 @@ To allow or disallow public access for a storage account with a template, create
174174
>
175175
> After you update the public access setting for the storage account, it may take up to 30 seconds before the change is fully propagated.
176176

177-
When a container is configured for anonymous public access, requests to read blobs in that container do not need to be authorized. However, any firewall rules that are configured for the storage account remain in effect and will block anonymous traffic.
177+
When a container is configured for anonymous public access, requests to read blobs in that container do not need to be authorized. However, any firewall rules that are configured for the storage account remain in effect and will block traffic inline with the configured ACLs.
178178

179179
Allowing or disallowing blob public access requires version 2019-04-01 or later of the Azure Storage resource provider. For more information, see [Azure Storage Resource Provider REST API](/rest/api/storagerp/).
180180

0 commit comments

Comments
 (0)