Azure Cloud Shell - VNet storage

Azure Public Test Date Azure Public Test Result

Azure US Gov Last Test Date Azure US Gov Last Test Result

Best Practice Check Cred Scan Check

Deploy To Azure Deploy To Azure US Gov Visualize

This template deploys the necessary storage to run Azure Cloud Shell inside a customer owned virtual network. Azure Cloud Shell is a browser-based, authenticated, command-line experience based in the Azure Portal for managing cloud resources. Running Cloud Shell in a customer virtual network allows the customer to manage resources that may be isolated from the public internet in a private virtual network. For more information, view our documentation:


In order to use this deployment there must be an existing resource group and a virtual network. Most users will already have a deesired resource group and virtual network they would like to connect to. If these resources do not exist, they must be created prior to running this template. Both the resource group and the virtual network must be in the same location.

Important! Secondary storage regions are currently not supported in Cloud Shell VNET scenarios.

Deployment steps

You can click the "Deploy to Azure" button at the beginning of this document or follow the instructions for command line deployment using the scripts in the root of this repo.


After deploying this template and the 101-cloud-shell-vnet template, navigate to Cloud Shell in the Azure Portal or on If Cloud Shell has been used in the past, the existing clouddrive must be unmounted. To do this run clouddrive unmount from an active Cloud Shell session. Reconnect to Cloud Shell, you will be prompted with the first run experience. Select your preferred shell experience, then navigate to the advanced settings and select the show isolated VNET settings box. Fill in the fields with the desired resources create with this template.

Tags: Microsoft.Storage/storageAccounts, Microsoft.Storage/storageAccounts/blobServices, Microsoft.Storage/storageAccounts/fileServices, Microsoft.Storage/storageAccounts/fileServices/shares, Microsoft.Network/virtualNetworks