Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Patch 512 #533

Merged
merged 6 commits into from
Nov 4, 2022
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 6 additions & 9 deletions en/azure/blobservice/blob-container-private-access.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,14 +15,11 @@
| **Recommended Action** | Ensure each blob container is configured to restrict anonymous access |

## Detailed Remediation Steps

1. Log into the Microsoft Azure Management Console.
2. Select the "Search resources, services, and docs" option at the top and search for Storage account. </br> <img src="/resources/azure/blobservice/blob-container-private-access/step2.png"/>
2. Find the search bar at the top and search for Storage account. </br> <img src="/resources/azure/blobservice/blob-container-private-access/step2.png"/>
3. Select the "Storage account" by clicking on the "Name" link to access the configuration changes. </br> <img src="/resources/azure/blobservice/blob-container-private-access/step3.png"/>
4. Click on the "Overveiw" in the selected "Storage account" and scroll down the right side of the settings and click on the "Blobs" option. </br> <img src="/resources/azure/blobservice/blob-container-private-access/step4.png"/>
5. Under the "Blobs" check for the "Public Access" and if it's set to Blob/Container then the selected "Blob" have anonymous public access level.</br> <img src="/resources/azure/blobservice/blob-container-private-access/step5.png"/>
6. Repeat steps number 2 - 5 to verify other Blobs in the "Storage accounts." </br>
7. Navigate to the "Storage accounts", select the "Storage account" and click on the "Name", select the "Overview" options and select the "Blob" which needs to have "Private access".</br> <img src="/resources/azure/blobservice/blob-container-private-access/step7.png"/>
8. Select the "Blob" and click on the "Change access level" at the top panel. </br> <img src="/resources/azure/blobservice/blob-container-private-access/step8.png"/>
9. On the "Change access level" tab, select the "Private (no anonymous access)" and click on the "OK" button to make the necessary changes.</br> <img src="/resources/azure/blobservice/blob-container-private-access/step9.png"/>
10. Repeat steps number 7 - 9 to ensure that all blob containers do not have anonymous public access level.</br>
4. In the left navigation panel click on "Containers" under "Data storage".</br> <img src="/resources/azure/blobservice/blob-container-private-access/step4.png"/>
5. In the Containers List, select the container for which the column "Public access level" shows "Blob" or "Container" and click on "Change access level" button at the top.</br> <img src="/resources/azure/blobservice/blob-container-private-access/step5.png"/>
6. In the "Change access level" pop up the "Public access level" dropdown should be set to "Private(no anonymous access)". If it is set to "Blob" or "Container" then anonymous requests are allowed at the service level and this is against azure best practices.<img src="/resources/azure/blobservice/blob-container-private-access/step6.png"/>
7. In the "Change access level" pop up click on the "Public access level" dropdown and select "Private(no anonymous access)" and click "OK" to make the necessary changes.<img src="/resources/azure/blobservice/blob-container-private-access/step7.png"/>
8. Repeat steps number 5 - 7 to ensure that all blob containers have private access level.</br>
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
Binary file not shown.