PublicAccess property in Azure blob container doesn't have the same value when running show and show-permission

ED 41 Reputation points
2023-01-10T23:30:16.507+00:00

I'm trying to check public access property of a blob container using CLI command. If i run "show" command, i can see that the publicAccess is null. But if i run "show-permission", the value is off.
Has anyone encountered this? Why is this the case?

278111-public-access.png

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
3,160 questions
{count} votes

2 answers

Sort by: Most helpful
  1. SaiKishor-MSFT 17,336 Reputation points
    2023-01-27T22:44:25.25+00:00

    @ED Public access is disabled by default on blob containers. Not specifying the value (‘null’) has the effect of public access being off, so they’re equivalent. So, this is expected. I hope this answers your question.

    Please let us know if you have any more questions and we will be glad to assist you further. Thank you!

    Remember:

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

    Want a reminder to come back and check responses? Here is how to subscribe to a notification.

    0 comments No comments

  2. Chi Chiu 0 Reputation points
    2023-09-27T19:50:46.08+00:00

    @ED I'm curious is your blob container located within a resources group? How did you created in the first place?

    Here is some reference:
    Azure Resource Manager accounts

    If your storage account is using the Azure Resource Manager deployment model, then you can remediate public access by setting the account's AllowBlobPublicAccess property to False. After you set the AllowBlobPublicAccess property to False, all requests for blob data to that storage account will require authorization, regardless of the public access setting for any individual container.

    To learn more about how to remediate public access for Azure Resource Manager accounts, see Remediate anonymous public read access to blob data (Azure Resource Manager deployments).

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.