From c371a5513c5b66a0df7c498dcd2f487acf4b0452 Mon Sep 17 00:00:00 2001
From: Acenl12 <38886380+Acenl12@users.noreply.github.com>
Date: Thu, 4 May 2023 03:50:24 +0000
Subject: [PATCH] Ensure Azure Storage Account default network access is set to
 Deny

Ensure Azure Storage Account default network access is set to Deny
---
 .github/azFunction/AzFunctionInfrastructure/main.bicep | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/azFunction/AzFunctionInfrastructure/main.bicep b/.github/azFunction/AzFunctionInfrastructure/main.bicep
index 261a6cccb..56b4eccab 100644
--- a/.github/azFunction/AzFunctionInfrastructure/main.bicep
+++ b/.github/azFunction/AzFunctionInfrastructure/main.bicep
@@ -22,6 +22,10 @@ resource resStorageAccount 'Microsoft.Storage/storageAccounts@2021-04-01' = {
   kind: 'StorageV2'
   properties: {
     supportsHttpsTrafficOnly: true
+    "networkAcls": {
+          "defaultAction": "Deny",
+          "bypass": "AzureServices"
+        }
     encryption: {
       services: {
         file: {