Azure storage account does allow public access misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_59
Category - Subcategory	Public Exposure - Storage Buckets
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

As a best practice, do not allow anonymous/public access to blob containers unless you have a very good reason. Instead, you should consider using a shared access signature token for providing controlled and time-limited access to blob containers. 'Public access level' allows you to grant anonymous/public read access to a container and the blobs within Azure blob storage.

By doing so, you can grant read-only access to these resources without sharing your account key, and without requiring a shared access signature.

How to Fix

Resource: azurerm_storage_account

• Arguments: allow_blob_public_access [source,go]

---

resource "azurerm_storage_account" "pike" { ...

• public_network_access_enabled = false ... }

---