Control: Azure > Storage > Storage Account > Firewall > Exceptions

Define the firewall exceptions for the Azure Storage storage account.

Some applications depend on Azure services or storage account logs and metrics that cannot be uniquely isolated through virtual network or IP address rules. Firewall exceptions allow you to define these exceptions, granting access to the storage account's data, logs, and metrics.

For more information on firewall exceptions, please see Azure Storage Firewall Exceptions.

Resource Types

This control targets the following resource types:

Azure > Storage > Storage Account

Policies

The following policies can be used to configure this control:

Azure > Storage > Storage Account > Firewall > Exceptions

This control type relies on these other policies when running actions:

Azure > Storage > Storage Account > Firewall > Exceptions > Items

Permissions

Cloud permissions used by this control and its actions:

microsoft.storage/storageaccounts/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-storage#/control/types/storageAccountFirewallExceptions

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/azure-storage#/control/types/storageAccountFirewallExceptions") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-storage#/control/types/storageAccountFirewallExceptions'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-storage#/control/types/storageAccountFirewallExceptions"