Skip to main content
You can secure an Azure Storage account’s network access and other security controls from the storage account’s Networking settings. Use these controls to limit exposure, enforce private connectivity, and apply layered protections such as encryption and fine-grained access.

​
Network access options

From the Networking blade you can control public network access. The primary options are: When allowing selected networks, you can:
  • Add virtual networks so resources in those VNets can access the account.
  • Add IP ranges to the storage account firewall to allow traffic from on-premises or other trusted IP ranges.

​
Connectivity options between VNets and Storage

There are two primary ways to integrate VNets with Azure Storage: If you want to remove all public communication, disable public network access and use private endpoints exclusively.
A screenshot of an Azure Storage account "Networking" settings page showing firewall, virtual network and private endpoint options with colorful callouts explaining how to set up private endpoints, control public access, restrict access to specific VNets, and add IP firewall ranges.
I repeat the Networking options here to emphasize how they form the foundation of secure storage architecture: choose the least-permissive network setting that still allows required operations, then layer other protections on top.

​
Built-in security capabilities

Beyond network controls, Azure Storage provides several built-in capabilities you should use together to harden your data:
When you change network settings (for example, disabling public network access or enabling private endpoints), verify and update DNS, routing, and any client configurations. Disabling public access or changing firewall rules can break existing clients, services, or automation that rely on the previous connectivity model.
These networking controls, encryption mechanisms, authentication and authorization models, and SAS strategies together form a layered approach to storage security. Review each control in the context of your data classification, compliance needs, and operational constraints when designing your storage architecture.

Watch Video