Manage network security exceptions for Azure Storage

You can enable traffic from Azure services outside of your network boundary by adding a network security exception.

For a complete list of trusted Azure services, see Trusted Azure services.

Add a network security exception

Portal

1. Navigate to the storage account for which you want to manage exceptions.

2. In the service menu, under Security + networking, select Networking, and then under Resource settings: Virtual networks, IP addresses, and exceptions, select View.

3. Under Exceptions, select the exceptions that you want to grant.

4. Select Save to apply your changes.

PowerShell

1. Install Azure PowerShell and sign in.

2. Display the exceptions for the storage account network rules:

   (Get-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount").Bypass
   

3. Configure the exceptions for the storage account network rules:

   Update-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount" -Bypass AzureServices,Metrics,Logging
   

4. Remove the exceptions from the storage account network rules:

   Update-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount" -Bypass None
   

Azure CLI

1. Install the Azure CLI and sign in.

2. Display the exceptions for the storage account network rules:

   az storage account show --resource-group "myresourcegroup" --name "mystorageaccount" --query networkRuleSet.bypass
   

3. Configure the exceptions for the storage account network rules:

   az storage account update --resource-group "myresourcegroup" --name "mystorageaccount" --bypass Logging Metrics AzureServices
   

4. Remove the exceptions from the storage account network rules:

   az storage account update --resource-group "myresourcegroup" --name "mystorageaccount" --bypass None
   

See also

• Azure Storage firewall and virtual network rules
• Trusted Azure services