Policy: Azure > Storage > Storage Account > Firewall > IP Ranges > Required

Configure storage accounts to allow access from specific public internet IP address ranges. This policy grants access to approved internet address ranges or individual IP addresses and blocks unapproved internet traffic.

If set to Enforce: Required > Items, this policy will grant access to the IP ranges in Required > Items.

Resource Types

This policy targets the following resource types:

Azure > Storage > Storage Account

Primary Policy

This policy is used with the following primary policy:

Azure > Storage > Storage Account > Firewall > IP Ranges

Items

Controls

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Required > Items` `Enforce: Required > Items`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceRequired

Policy Type URI

tmod:@turbot/azure-storage#/policy/types/storageAccountFirewallIpRangesRequired

GraphQL

query policyType(id: "tmod:@turbot/azure-storage#/policy/types/storageAccountFirewallIpRangesRequired") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-storage#/policy/types/storageAccountFirewallIpRangesRequired'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-storage#/policy/types/storageAccountFirewallIpRangesRequired'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-storage#/policy/types/storageAccountFirewallIpRangesRequired"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-storage#/policy/types/storageAccountFirewallIpRangesRequired"