customer managed Storage Account with private endpoint for boot diagnostic ?

Question

hi,

I've assigned the policy Storage account public Blob access should be disallowed in audit mode. Now looking at the data I can see a lot storage accounts that are storage accounts used for VM boot diagnostic. Now, I don't think a VM to storage account in this case makse much sense, maybe one would be enough, however the question is would a storage account behind private endpoint work in this case or are there any limitations ?

Thanks !

Answer 1

Limitations tie to the I/O throughput of the storage account.

Switch to the managed storage account instead

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

Hi Adam,

Yes, you can use Private Endpoint for the VM to access custom diagnostics storage account, with public network access disabled on the storage account. One limitation would be serial console doesn't work, so if/when you need that you could temporarily change the firewall setting on the storage account.

Please click Accept Answer if the above was helpful.

Thanks.

-TP