Need help on storage container created with Public Access Level=Private (no anonymous access)

Question

Q1 : If I create a storage container with 'Public Access Level=Private (no anonymous access)', does this mean that this container can only be accessed (without access keys of the parent storage account) from private end points (e.g. Virtual machines on VNets associated with the private end point) associated with the parent storage account ?

Q2: Is there any way to access such storage container with 'Public Access Level=Private (no anonymous access)' using Azure AD User Account

Answer 1

Hello @Sudipta

1) If the user have right access to the Storage Account then they can see the Private Containers as well, this is not related to private endpoint configurations

2) When the access level is private that means there is no anonymous access to the container except for the ones that have access to it via Access Control

When a container is configured for public access, any client can read data in that container. Public access presents a potential security risk, so if your scenario does not require it, Microsoft recommends that you disallow it for the storage account

The following table summarizes how both settings together affect public access for a container: