Skip to content

Commit f60b185

Browse files
authored
Update storage-require-secure-transfer.md
1 parent 7f3cc5d commit f60b185

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

articles/storage/common/storage-require-secure-transfer.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ author: normesta
77

88
ms.service: azure-storage
99
ms.topic: how-to
10-
ms.date: 06/01/2021
10+
ms.date: 06/17/2024
1111
ms.author: normesta
1212
ms.reviewer: fryu
1313
ms.subservice: storage-common-concepts
@@ -17,18 +17,18 @@ ms.devlang: azurecli
1717

1818
# Require secure transfer to ensure secure connections
1919

20-
You can configure your storage account to accept requests from secure connections only by setting the **Secure transfer required** property for the storage account. When you require secure transfer, any requests originating from an insecure connection are rejected. Microsoft recommends that you always require secure transfer for all of your storage accounts.
20+
You can configure your storage account to accept requests from secure connections only by setting the **Secure transfer required** property for the storage account. When you require secure transfer, any requests originating from an insecure connection are rejected. Microsoft recommends that you always require secure transfer for all of your storage accounts, unless you're using NFS Azure file shares. The **Secure transfer required** property must be disabled in order for NFS Azure file shares to work.
2121

2222
When secure transfer is required, a call to an Azure Storage REST API operation must be made over HTTPS. Any request made over HTTP is rejected. By default, the **Secure transfer required** property is enabled when you create a storage account.
2323

2424
Azure Policy provides a built-in policy to ensure that secure transfer is required for your storage accounts. For more information, see the **Storage** section in [Azure Policy built-in policy definitions](../../governance/policy/samples/built-in-policies.md#storage).
2525

26-
Connecting to an Azure file share over SMB without encryption fails when secure transfer is required for the storage account. Examples of insecure connections include those made over SMB 2.1 or SMB 3.x without encryption.
26+
Connecting to an Azure file share over SMB without encryption fails when secure transfer is required for the storage account. Examples of insecure connections include those made over SMB 2.1 or SMB 3.x without encryption.
2727

2828
> [!NOTE]
29-
> Because Azure Storage doesn't support HTTPS for custom domain names, this option is not applied when you're using a custom domain name.
29+
> Because Azure Storage doesn't support HTTPS for custom domain names, this option isn't applied when you're using a custom domain name.
3030
>
31-
> This secure transfer setting does not apply to TCP. Connections via NFS 3.0 protocol support in Azure Blob Storage using TCP, which is not secured, will succeed.
31+
> This secure transfer setting doesn't apply to TCP. Connections via NFS 3.0 protocol support in Azure Blob Storage using TCP, which isn't secured, will succeed.
3232
3333
## Require secure transfer in the Azure portal
3434

0 commit comments

Comments
 (0)