How to limit access to the Storage container in azure ?

Question

Hi ,
I want to limit the access to my storage container or my storage account . I want only from 3 public Ip addresses to access it and deny access from any other resources.
how can I achieve that ?

Answer 1

Hello @Gayan Koswaththa

In the networking section of Storage account, you can enable from selected virtual networks and IP addresses, and below that you can provide the list of IP addresses you want to allow access to the storage Account.

Answer 2

Hi Gayan Koswaththa,

Thanks for reaching out to Microsoft Q&A.

See the accepted answer which explains the easiest way of limiting the firewall IPs. To not duplicate the answer, I am leaving the link below to the original post, please go through this.

https://learn.microsoft.com/en-us/answers/questions/1160731/how-to-provide-limited-public-access-to-a-containe

Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.

Answer 3

Hi @Gayan Koswaththa ,

To add some more clarification, the above method is to limit the access on the storage account level only.

You can't configure this on container specific level based on IP. After restricting based on IP on the account level, you can control based on the RBAC role on the container level further. The combination shall then help you controlling on the container level as well.

Please let us know if you have any further queries. I’m happy to assist you further.    

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.