Explicitly disable storage blob public access for workspace templates

Joshua Loeffler · Joshua Loeffler · commit fb2d3928a965 · 2022-11-17T11:03:43.000-05:00
diff --git a/quickstart/101-machine-learning/workspace.tf b/quickstart/101-machine-learning/workspace.tf
@@ -21,6 +21,7 @@ resource "azurerm_storage_account" "default" {
   resource_group_name      = azurerm_resource_group.default.name
   account_tier             = "Standard"
   account_replication_type = "GRS"
+  allow_nested_items_to_be_public = false
 }
 
 resource "azurerm_container_registry" "default" {
diff --git a/quickstart/202-machine-learning-moderately-secure-existing-VNet/workspace.tf b/quickstart/202-machine-learning-moderately-secure-existing-VNet/workspace.tf
@@ -26,6 +26,7 @@ resource "azurerm_storage_account" "default" {
   resource_group_name      = azurerm_resource_group.default.name
   account_tier             = "Standard"
   account_replication_type = "GRS"
+  allow_nested_items_to_be_public = false
 
   network_rules {
     default_action = "Deny"
diff --git a/quickstart/301-machine-learning-hub-spoke-secure/workspace.tf b/quickstart/301-machine-learning-hub-spoke-secure/workspace.tf
@@ -27,6 +27,7 @@ resource "azurerm_storage_account" "default" {
   resource_group_name      = azurerm_resource_group.default.name
   account_tier             = "Standard"
   account_replication_type = "GRS"
+  allow_nested_items_to_be_public = false
 
   network_rules {
     default_action = "Deny"

Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,7 @@ resource "azurerm_storage_account" "default" {`
`21`	`21`	`resource_group_name = azurerm_resource_group.default.name`
`22`	`22`	`account_tier = "Standard"`
`23`	`23`	`account_replication_type = "GRS"`
	`24`	`+ allow_nested_items_to_be_public = false`
`24`	`25`	`}`
`25`	`26`
`26`	`27`	`resource "azurerm_container_registry" "default" {`