diff --git a/en/azure/storageaccounts/network-access-default-action.md b/en/azure/storageaccounts/network-access-default-action.md index ef83e4e47..b0a831039 100644 --- a/en/azure/storageaccounts/network-access-default-action.md +++ b/en/azure/storageaccounts/network-access-default-action.md @@ -16,12 +16,12 @@ ## Detailed Remediation Steps -1. Log into the Microsoft Azure Management Console. -2. Select the "Search resources, services, and docs" option at the top and search for Storage account.
-3. Select the "Storage account" by clicking on the "Name" link to access the configuration changes.
-4. Scroll down the selected "Storage account" navigation panel and in "Settings" click on the "Firewalls and virtual networks."
-5. On the "Firewalls and virtual networks" tab cross-check whether the "Allow access from" from "All networks" is selected or not. If "All networks" is selected then the selected "Storage account" access is not restricted to trusted networks.
-6. Repeat steps number 2 - 5 to check other "Storage account" in the account.
-7. Navigate to the "Storage accounts", select the "Storage account" and click on the "Name", select the "Firewalls and virtual networks" under "Settings" that needs to disable the "Allow access for all networks."
-8. On the "Firewalls and virtual networks" tab under "Allow access from" choose the option of "Selected Network" and choose the trusted "Network" and click on the "Save" button at the top to make the changes.
-9. Repeat steps number 7 - 8 to ensure that "Storage account" access is restricted to trusted networks.
+1. Log in to the Microsoft Azure Management Console. +2. Select the "Search resources, services, and docs" option at the top and search for "Storage accounts".
+3. Select the "Storage account" by clicking on the "Name" link to access the configuration page.
+4. Scroll down the selected "Storage account" navigation panel and click on "Networking" under "Security + networking".
+5. Once on the "Networking page" click on tab "Firewalls and virtual networks".
+6. On the "Firewalls and virtual networks" tab check the option selected under "Public network access". If "Enabled from all networks" is selected then the selected "Storage account" access is not restricted to trusted networks.
+7. To restrict the selected storage account's access to all networks, under "Public network access" select option "Enabled from selected virtual networks and IP addresses" and choose the trusted "Virtual Network".
+8. Click on "Save" button at the top to make the changes.
+9. Repeat step number 3 - 8 to ensure that "Storage account" access is restricted to trusted networks.
diff --git a/resources/azure/storageaccounts/network-access-default-action/step2.png b/resources/azure/storageaccounts/network-access-default-action/step2.png index 8707b5cbd..5e239a49b 100644 Binary files a/resources/azure/storageaccounts/network-access-default-action/step2.png and b/resources/azure/storageaccounts/network-access-default-action/step2.png differ diff --git a/resources/azure/storageaccounts/network-access-default-action/step3.png b/resources/azure/storageaccounts/network-access-default-action/step3.png index c1f908168..233a4c900 100644 Binary files a/resources/azure/storageaccounts/network-access-default-action/step3.png and b/resources/azure/storageaccounts/network-access-default-action/step3.png differ diff --git a/resources/azure/storageaccounts/network-access-default-action/step4.png b/resources/azure/storageaccounts/network-access-default-action/step4.png index 508160ff6..b00346866 100644 Binary files a/resources/azure/storageaccounts/network-access-default-action/step4.png and b/resources/azure/storageaccounts/network-access-default-action/step4.png differ diff --git a/resources/azure/storageaccounts/network-access-default-action/step5.png b/resources/azure/storageaccounts/network-access-default-action/step5.png index cddd30f87..bb4a1558c 100644 Binary files a/resources/azure/storageaccounts/network-access-default-action/step5.png and b/resources/azure/storageaccounts/network-access-default-action/step5.png differ diff --git a/resources/azure/storageaccounts/network-access-default-action/step6.png b/resources/azure/storageaccounts/network-access-default-action/step6.png new file mode 100644 index 000000000..479542c2b Binary files /dev/null and b/resources/azure/storageaccounts/network-access-default-action/step6.png differ diff --git a/resources/azure/storageaccounts/network-access-default-action/step7.png b/resources/azure/storageaccounts/network-access-default-action/step7.png index f0335b0e8..cfe9d56de 100644 Binary files a/resources/azure/storageaccounts/network-access-default-action/step7.png and b/resources/azure/storageaccounts/network-access-default-action/step7.png differ diff --git a/resources/azure/storageaccounts/network-access-default-action/step8.png b/resources/azure/storageaccounts/network-access-default-action/step8.png index 213c88d38..538221be7 100644 Binary files a/resources/azure/storageaccounts/network-access-default-action/step8.png and b/resources/azure/storageaccounts/network-access-default-action/step8.png differ