fix: Merge pull request #232 from microsoft/psl-bug-14480

Avijit-Microsoft · web-flow · commit bfffb2d48905 · 2025-02-19T19:05:35.000+05:30
fix: storage permission issue
diff --git a/infra/deploy_ai_foundry.bicep b/infra/deploy_ai_foundry.bicep
@@ -261,7 +261,7 @@ resource storage 'Microsoft.Storage/storageAccounts@2022-09-01' = {
     accessTier: 'Hot'
     allowBlobPublicAccess: false
     allowCrossTenantReplication: false
-    allowSharedKeyAccess: true
+    allowSharedKeyAccess: false
     encryption: {
       keySource: 'Microsoft.Storage'
       requireInfrastructureEncryption: false
diff --git a/infra/deploy_azure_function_charts.bicep b/infra/deploy_azure_function_charts.bicep
@@ -27,6 +27,7 @@ resource storageAccount 'Microsoft.Storage/storageAccounts@2023-05-01' = {
   kind: 'StorageV2'
   properties: {
     accessTier: 'Hot'
+    allowSharedKeyAccess: false
   }
 }
 
diff --git a/infra/deploy_azure_function_rag.bicep b/infra/deploy_azure_function_rag.bicep
@@ -39,6 +39,7 @@ resource storageAccount 'Microsoft.Storage/storageAccounts@2023-05-01' = {
   kind: 'StorageV2'
   properties: {
     accessTier: 'Hot'
+    allowSharedKeyAccess: false
   }
 }
 
diff --git a/infra/deploy_storage_account.bicep b/infra/deploy_storage_account.bicep
@@ -26,6 +26,7 @@ resource storageAccounts_resource 'Microsoft.Storage/storageAccounts@2022-09-01'
   properties: {
     minimumTlsVersion: 'TLS1_2'
     allowBlobPublicAccess: false
+    allowSharedKeyAccess: false
     isHnsEnabled: true
     networkAcls: {
       bypass: 'AzureServices'

Original file line number	Diff line number	Diff line change
`@@ -27,6 +27,7 @@ resource storageAccount 'Microsoft.Storage/storageAccounts@2023-05-01' = {`
`27`	`27`	`kind: 'StorageV2'`
`28`	`28`	`properties: {`
`29`	`29`	`accessTier: 'Hot'`
	`30`	`+ allowSharedKeyAccess: false`
`30`	`31`	`}`
`31`	`32`	`}`
`32`	`33`
Original file line number	Diff line number	Diff line change
`@@ -39,6 +39,7 @@ resource storageAccount 'Microsoft.Storage/storageAccounts@2023-05-01' = {`
`39`	`39`	`kind: 'StorageV2'`
`40`	`40`	`properties: {`
`41`	`41`	`accessTier: 'Hot'`
	`42`	`+ allowSharedKeyAccess: false`
`42`	`43`	`}`
`43`	`44`	`}`
`44`	`45`