How to mitigate public endpoint access vulnerability issue in Function App's Storage Account flagged by Microsoft Defender for cloud?

Question

We have developed a Function App in Microsoft Sentinel that stores checkpoints in the storage account. Microsoft Defender for Cloud has flagged our Azure Storage account's public endpoint access as a vulnerability, recommending using private endpoints. However, we cannot use private endpoints for Storage accounts due to environmental limitations. Are there any alternative security measures or best practices that we can implement to mitigate the risk associated with a public endpoint for our Azure Storage account? Any insights, experiences, or recommendations from the community would be appreciated. Thank you!

Answer 1

Hi @Nirali Shah , The below documentation should give a headstart

https://jkindon.com/securing-and-optimizing-access-to-azure-storage-accounts-with-azure-endpoints/

https://learn.microsoft.com/en-us/azure/storage/blobs/security-recommendations

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-networking-endpoints?tabs=azure-portal Thanks