How to mitigate public endpoint access vulnerability issue in Function App's Storage Account flagged by Microsoft Defender for cloud?

Nirali Shah 106 Reputation points
2023-09-11T06:47:06.41+00:00

We have developed a Function App in Microsoft Sentinel that stores checkpoints in the storage account. Microsoft Defender for Cloud has flagged our Azure Storage account's public endpoint access as a vulnerability, recommending using private endpoints. However, we cannot use private endpoints for Storage accounts due to environmental limitations. Are there any alternative security measures or best practices that we can implement to mitigate the risk associated with a public endpoint for our Azure Storage account? Any insights, experiences, or recommendations from the community would be appreciated. Thank you!

Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
3,459 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,137 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
799 questions