How to provide limited Public Access to a Container in a Storage Account?

Question

Hello everybody!

Me and my team are using Azure Synapse Analytics to ingest data from a REST API to a Azure Data Lake Storage Gen2, in order to create views automatically.

The only way we could manage to do this in our Workspace was by previously changing the Public Access Level to the Container inside our Storage Account to "Container (anonymous read access for containers and blobs)".

Is there any way to avoid doing this, and just enable this level of access to containers for a certain (limited) amount of users / IPs, perhaps keeping it "Private (no anonymous access)"?

Screenshot from 2023-01-13 17-35-15.png

Thank you very much in advance.

Kind regards,
Mateo

Answer 1

@Mateo Estrada Bazan Thanks for reaching out to Microsoft Q&A. I understand that you want to be able to restrict access to your ADLS Gen2 account for a certain user/IPs only so you can disable Public access to the same, is that right?

The best/easiest way to do the same would be by adding the IPs in the firewall as shown below-

Link to the document- [https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal#change-the-default-network-access-rule

With ADLS Gen2, you also have the option to restrict it per container/Blob in a better and more elaborate way using Access Control Lists. Please go through this document for more details- [https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control

Hope this helps. If you are looking for more assistance, please do let us know and we will be glad to assist further. Thank you!