---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# azure_storage_account{% #azure_storage_account %}

## `access_tier`{% #access_tier %}

**Type**: `STRING`**Provider name**: `properties.accessTier`**Description**: Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.

## `account_migration_in_progress`{% #account_migration_in_progress %}

**Type**: `BOOLEAN`**Provider name**: `properties.accountMigrationInProgress`**Description**: If customer initiated account migration is in progress, the value will be true else it will be null.

## `allow_blob_public_access`{% #allow_blob_public_access %}

**Type**: `BOOLEAN`**Provider name**: `properties.allowBlobPublicAccess`**Description**: Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is false for this property.

## `allow_cross_tenant_replication`{% #allow_cross_tenant_replication %}

**Type**: `BOOLEAN`**Provider name**: `properties.allowCrossTenantReplication`**Description**: Allow or disallow cross AAD tenant object replication. Set this property to true for new or existing accounts only if object replication policies will involve storage accounts in different AAD tenants. The default interpretation is false for new accounts to follow best security practices by default.

## `allow_shared_key_access`{% #allow_shared_key_access %}

**Type**: `BOOLEAN`**Provider name**: `properties.allowSharedKeyAccess`**Description**: Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.

## `allowed_copy_scope`{% #allowed_copy_scope %}

**Type**: `STRING`**Provider name**: `properties.allowedCopyScope`**Description**: Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.

## `blob_services`{% #blob_services %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `BlobServiceProperties`

- `change_feed`**Type**: `STRUCT`**Provider name**: `properties.changeFeed`**Description**: The blob service properties for change feed events.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Indicates whether change feed event logging is enabled for the Blob service.
  - `retention_in_days`**Type**: `INT32`**Provider name**: `retentionInDays`**Description**: Indicates the duration of changeFeed retention in days. Minimum value is 1 day and maximum value is 146000 days (400 years). A null value indicates an infinite retention of the change feed.
- `container_delete_retention_policy`**Type**: `STRUCT`**Provider name**: `properties.containerDeleteRetentionPolicy`**Description**: The blob service properties for container soft delete.
  - `allow_permanent_delete`**Type**: `BOOLEAN`**Provider name**: `allowPermanentDelete`**Description**: This property when set to true allows deletion of the soft deleted blob versions and snapshots. This property cannot be used blob restore policy. This property only applies to blob service and does not apply to containers or file share.
  - `days`**Type**: `INT32`**Provider name**: `days`**Description**: Indicates the number of days that the deleted item should be retained. The minimum specified value can be 1 and the maximum value can be 365.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Indicates whether DeleteRetentionPolicy is enabled.
- `cors`**Type**: `STRUCT`**Provider name**: `properties.cors`**Description**: Specifies CORS rules for the Blob service. You can include up to five CorsRule elements in the request. If no CorsRule elements are included in the request body, all CORS rules will be deleted, and CORS will be disabled for the Blob service.
  - `cors_rules`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `corsRules`**Description**: The List of CORS rules. You can include up to five CorsRule elements in the request.
    - `allowed_headers`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `allowedHeaders`**Description**: Required if CorsRule element is present. A list of headers allowed to be part of the cross-origin request.
    - `allowed_methods`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `allowedMethods`**Description**: Required if CorsRule element is present. A list of HTTP methods that are allowed to be executed by the origin.
    - `allowed_origins`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `allowedOrigins`**Description**: Required if CorsRule element is present. A list of origin domains that will be allowed via CORS, or "*" to allow all domains
    - `exposed_headers`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `exposedHeaders`**Description**: Required if CorsRule element is present. A list of response headers to expose to CORS clients.
    - `max_age_in_seconds`**Type**: `INT32`**Provider name**: `maxAgeInSeconds`**Description**: Required if CorsRule element is present. The number of seconds that the client/browser should cache a preflight response.
- `delete_retention_policy`**Type**: `STRUCT`**Provider name**: `properties.deleteRetentionPolicy`**Description**: The blob service properties for blob soft delete.
  - `allow_permanent_delete`**Type**: `BOOLEAN`**Provider name**: `allowPermanentDelete`**Description**: This property when set to true allows deletion of the soft deleted blob versions and snapshots. This property cannot be used blob restore policy. This property only applies to blob service and does not apply to containers or file share.
  - `days`**Type**: `INT32`**Provider name**: `days`**Description**: Indicates the number of days that the deleted item should be retained. The minimum specified value can be 1 and the maximum value can be 365.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Indicates whether DeleteRetentionPolicy is enabled.
- `id`**Type**: `STRING`**Provider name**: `id`**Description**: Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- `is_versioning_enabled`**Type**: `BOOLEAN`**Provider name**: `properties.isVersioningEnabled`**Description**: Versioning is enabled if set to true.
- `name`**Type**: `STRING`**Provider name**: `name`**Description**: The name of the resource
- `restore_policy`**Type**: `STRUCT`**Provider name**: `properties.restorePolicy`**Description**: The blob service properties for blob restore policy.
  - `days`**Type**: `INT32`**Provider name**: `days`**Description**: how long this blob can be restored. It should be great than zero and less than DeleteRetentionPolicy.days.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Blob restore is enabled if set to true.
  - `last_enabled_time`**Type**: `STRING`**Provider name**: `lastEnabledTime`**Description**: Deprecated in favor of minRestoreTime property.
  - `min_restore_time`**Type**: `STRING`**Provider name**: `minRestoreTime`**Description**: Returns the minimum date and time that the restore can be started.
- `sku`**Type**: `STRUCT`**Provider name**: `sku`**Description**: Sku name and tier.
  - `name`**Type**: `STRING`**Provider name**: `name`
  - `tier`**Type**: `STRING`**Provider name**: `tier`
- `type`**Type**: `STRING`**Provider name**: `type`**Description**: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

## `creation_time`{% #creation_time %}

**Type**: `STRING`**Provider name**: `properties.creationTime`**Description**: Gets the creation date and time of the storage account in UTC.

## `default_to_o_auth_authentication`{% #default_to_o_auth_authentication %}

**Type**: `BOOLEAN`**Provider name**: `properties.defaultToOAuthAuthentication`**Description**: A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.

## `dns_endpoint_type`{% #dns_endpoint_type %}

**Type**: `STRING`**Provider name**: `properties.dnsEndpointType`**Description**: Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.

## `encryption`{% #encryption %}

**Type**: `STRUCT`**Provider name**: `properties.encryption`**Description**: Encryption settings to be used for server-side encryption for the storage account.

- `key_source`**Type**: `STRING`**Provider name**: `keySource`**Description**: The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- `keyvaultproperties`**Type**: `STRUCT`**Provider name**: `keyvaultproperties`**Description**: Properties provided by key vault.
  - `current_versioned_key_expiration_timestamp`**Type**: `STRING`**Provider name**: `currentVersionedKeyExpirationTimestamp`**Description**: This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
  - `current_versioned_key_identifier`**Type**: `STRING`**Provider name**: `currentVersionedKeyIdentifier`**Description**: The object identifier of the current versioned Key Vault Key in use.
  - `keyname`**Type**: `STRING`**Provider name**: `keyname`**Description**: The name of KeyVault key.
  - `keyvaulturi`**Type**: `STRING`**Provider name**: `keyvaulturi`**Description**: The Uri of KeyVault.
  - `keyversion`**Type**: `STRING`**Provider name**: `keyversion`**Description**: The version of KeyVault key.
  - `last_key_rotation_timestamp`**Type**: `STRING`**Provider name**: `lastKeyRotationTimestamp`**Description**: Timestamp of last rotation of the Key Vault Key.
- `require_infrastructure_encryption`**Type**: `BOOLEAN`**Provider name**: `requireInfrastructureEncryption`**Description**: A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- `services`**Type**: `STRUCT`**Provider name**: `services`**Description**: List of services which support encryption.
  - `blob`**Type**: `STRUCT`**Provider name**: `blob`**Description**: The encryption function of the blob storage service.
    - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
    - `key_type`**Type**: `STRING`**Provider name**: `keyType`**Description**: Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
    - `last_enabled_time`**Type**: `STRING`**Provider name**: `lastEnabledTime`**Description**: Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
  - `file`**Type**: `STRUCT`**Provider name**: `file`**Description**: The encryption function of the file storage service.
    - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
    - `key_type`**Type**: `STRING`**Provider name**: `keyType`**Description**: Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
    - `last_enabled_time`**Type**: `STRING`**Provider name**: `lastEnabledTime`**Description**: Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.

## `id`{% #id %}

**Type**: `STRING`**Provider name**: `id`**Description**: Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

## `identity`{% #identity %}

**Type**: `STRUCT`**Provider name**: `identity`**Description**: The identity of the resource.

- `principal_id`**Type**: `STRING`**Provider name**: `principalId`**Description**: The principal ID of resource identity.
- `tenant_id`**Type**: `STRING`**Provider name**: `tenantId`**Description**: The tenant ID of resource.
- `type`**Type**: `STRING`**Provider name**: `type`**Description**: The identity type.

## `is_local_user_enabled`{% #is_local_user_enabled %}

**Type**: `BOOLEAN`**Provider name**: `properties.isLocalUserEnabled`**Description**: Enables local users feature, if set to true

## `is_sftp_enabled`{% #is_sftp_enabled %}

**Type**: `BOOLEAN`**Provider name**: `properties.isSftpEnabled`**Description**: Enables Secure File Transfer Protocol, if set to true

## `is_sku_conversion_blocked`{% #is_sku_conversion_blocked %}

**Type**: `BOOLEAN`**Provider name**: `properties.isSkuConversionBlocked`**Description**: This property will be set to true or false on an event of ongoing migration. Default value is null.

## `kind`{% #kind %}

**Type**: `STRING`**Provider name**: `kind`**Description**: Gets the Kind.

## `large_file_shares_state`{% #large_file_shares_state %}

**Type**: `STRING`**Provider name**: `properties.largeFileSharesState`**Description**: Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.

## `location`{% #location %}

**Type**: `STRING`**Provider name**: `location`**Description**: The geo-location where the resource lives

## `management_policy`{% #management_policy %}

**Type**: `STRUCT`**Provider name**: `ManagementPolicy`

- `id`**Type**: `STRING`**Provider name**: `id`**Description**: Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- `last_modified_time`**Type**: `STRING`**Provider name**: `properties.lastModifiedTime`**Description**: Returns the date and time the ManagementPolicies was last modified.
- `name`**Type**: `STRING`**Provider name**: `name`**Description**: The name of the resource
- `policy`**Type**: `STRUCT`**Provider name**: `properties.policy`**Description**: The Storage Account ManagementPolicy, in JSON format. See more details in: [https://docs.microsoft.com/en-us/azure/storage/common/storage-lifecycle-managment-concepts](https://docs.microsoft.com/en-us/azure/storage/common/storage-lifecycle-managment-concepts).
  - `rules`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `rules`**Description**: The Storage Account ManagementPolicies Rules. See more details in: [https://docs.microsoft.com/en-us/azure/storage/common/storage-lifecycle-managment-concepts](https://docs.microsoft.com/en-us/azure/storage/common/storage-lifecycle-managment-concepts).
    - `definition`**Type**: `STRUCT`**Provider name**: `definition`**Description**: An object that defines the Lifecycle rule.
      - `actions`**Type**: `STRUCT`**Provider name**: `actions`**Description**: An object that defines the action set.
        - `base_blob`**Type**: `STRUCT`**Provider name**: `baseBlob`**Description**: The management policy action for base blob
          - `delete`**Type**: `STRUCT`**Provider name**: `delete`**Description**: The function to delete the blob
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after blob creation.
            - `days_after_last_access_time_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastAccessTimeGreaterThan`**Description**: Value indicating the age in days after last blob access. This property can only be used in conjunction with last access time tracking policy
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterModificationGreaterThan to be set for baseBlobs based actions. The blob will be archived if both the conditions are satisfied.
            - `days_after_modification_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterModificationGreaterThan`**Description**: Value indicating the age in days after last modification
          - `tier_to_archive`**Type**: `STRUCT`**Provider name**: `tierToArchive`**Description**: The function to tier blobs to archive storage.
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after blob creation.
            - `days_after_last_access_time_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastAccessTimeGreaterThan`**Description**: Value indicating the age in days after last blob access. This property can only be used in conjunction with last access time tracking policy
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterModificationGreaterThan to be set for baseBlobs based actions. The blob will be archived if both the conditions are satisfied.
            - `days_after_modification_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterModificationGreaterThan`**Description**: Value indicating the age in days after last modification
          - `tier_to_cool`**Type**: `STRUCT`**Provider name**: `tierToCool`**Description**: The function to tier blobs to cool storage.
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after blob creation.
            - `days_after_last_access_time_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastAccessTimeGreaterThan`**Description**: Value indicating the age in days after last blob access. This property can only be used in conjunction with last access time tracking policy
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterModificationGreaterThan to be set for baseBlobs based actions. The blob will be archived if both the conditions are satisfied.
            - `days_after_modification_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterModificationGreaterThan`**Description**: Value indicating the age in days after last modification
        - `snapshot`**Type**: `STRUCT`**Provider name**: `snapshot`**Description**: The management policy action for snapshot
          - `delete`**Type**: `STRUCT`**Provider name**: `delete`**Description**: The function to delete the blob snapshot
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after creation
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterCreationGreaterThan to be set for snapshots and blob version based actions. The blob will be archived if both the conditions are satisfied.
          - `tier_to_archive`**Type**: `STRUCT`**Provider name**: `tierToArchive`**Description**: The function to tier blob snapshot to archive storage.
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after creation
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterCreationGreaterThan to be set for snapshots and blob version based actions. The blob will be archived if both the conditions are satisfied.
          - `tier_to_cool`**Type**: `STRUCT`**Provider name**: `tierToCool`**Description**: The function to tier blob snapshot to cool storage.
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after creation
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterCreationGreaterThan to be set for snapshots and blob version based actions. The blob will be archived if both the conditions are satisfied.
        - `version`**Type**: `STRUCT`**Provider name**: `version`**Description**: The management policy action for version
          - `delete`**Type**: `STRUCT`**Provider name**: `delete`**Description**: The function to delete the blob version
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after creation
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterCreationGreaterThan to be set for snapshots and blob version based actions. The blob will be archived if both the conditions are satisfied.
          - `tier_to_archive`**Type**: `STRUCT`**Provider name**: `tierToArchive`**Description**: The function to tier blob version to archive storage.
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after creation
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterCreationGreaterThan to be set for snapshots and blob version based actions. The blob will be archived if both the conditions are satisfied.
          - `tier_to_cool`**Type**: `STRUCT`**Provider name**: `tierToCool`**Description**: The function to tier blob version to cool storage.
            - `days_after_creation_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterCreationGreaterThan`**Description**: Value indicating the age in days after creation
            - `days_after_last_tier_change_greater_than`**Type**: `DOUBLE`**Provider name**: `daysAfterLastTierChangeGreaterThan`**Description**: Value indicating the age in days after last blob tier change time. This property is only applicable for tierToArchive actions and requires daysAfterCreationGreaterThan to be set for snapshots and blob version based actions. The blob will be archived if both the conditions are satisfied.
      - `filters`**Type**: `STRUCT`**Provider name**: `filters`**Description**: An object that defines the filter set.
        - `blob_types`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `blobTypes`**Description**: An array of predefined enum values. Currently blockBlob supports all tiering and delete actions. Only delete actions are supported for appendBlob.
        - `prefix_match`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `prefixMatch`**Description**: An array of strings for prefixes to be match.
    - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Rule is enabled if set to true.
    - `name`**Type**: `STRING`**Provider name**: `name`**Description**: A rule name can contain any combination of alpha numeric characters. Rule name is case-sensitive. It must be unique within a policy.
    - `type`**Type**: `STRING`**Provider name**: `type`**Description**: The valid value is Lifecycle
- `type`**Type**: `STRING`**Provider name**: `type`**Description**: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

## `minimum_tls_version`{% #minimum_tls_version %}

**Type**: `STRING`**Provider name**: `properties.minimumTlsVersion`**Description**: Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: The name of the resource

## `network_acls`{% #network_acls %}

**Type**: `STRUCT`**Provider name**: `properties.networkAcls`**Description**: Network rule set

- `bypass`**Type**: `STRING`**Provider name**: `bypass`**Description**: Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- `default_action`**Type**: `STRING`**Provider name**: `defaultAction`**Description**: Specifies the default action of allow or deny when no other rules match.
- `ip_rules`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `ipRules`**Description**: Sets the IP ACL rules
  - `action`**Type**: `STRING`**Provider name**: `action`**Description**: The action of IP ACL rule.
  - `value`**Type**: `STRING`**Provider name**: `value`**Description**: Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- `virtual_network_rules`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `virtualNetworkRules`**Description**: Sets the virtual network rules
  - `action`**Type**: `STRING`**Provider name**: `action`**Description**: The action of virtual network rule.
  - `id`**Type**: `STRING`**Provider name**: `id`**Description**: Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
  - `state`**Type**: `STRING`**Provider name**: `state`**Description**: Gets the state of virtual network rule.

## `primary_endpoints`{% #primary_endpoints %}

**Type**: `STRUCT`**Provider name**: `properties.primaryEndpoints`**Description**: Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.

- `blob`**Type**: `STRING`**Provider name**: `blob`**Description**: Gets the blob endpoint.
- `dfs`**Type**: `STRING`**Provider name**: `dfs`**Description**: Gets the dfs endpoint.
- `file`**Type**: `STRING`**Provider name**: `file`**Description**: Gets the file endpoint.
- `queue`**Type**: `STRING`**Provider name**: `queue`**Description**: Gets the queue endpoint.
- `table`**Type**: `STRING`**Provider name**: `table`**Description**: Gets the table endpoint.
- `web`**Type**: `STRING`**Provider name**: `web`**Description**: Gets the web endpoint.

## `primary_location`{% #primary_location %}

**Type**: `STRING`**Provider name**: `properties.primaryLocation`**Description**: Gets the location of the primary data center for the storage account.

## `private_endpoint_connections`{% #private_endpoint_connections %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `properties.privateEndpointConnections`**Description**: List of private endpoint connection associated with the specified storage account

- `id`**Type**: `STRING`**Provider name**: `id`**Description**: Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- `name`**Type**: `STRING`**Provider name**: `name`**Description**: The name of the resource
- `private_endpoint`**Type**: `STRUCT`**Provider name**: `properties.privateEndpoint`**Description**: The resource of private end point.
  - `id`**Type**: `STRING`**Provider name**: `id`**Description**: The ARM identifier for Private Endpoint
- `private_link_service_connection_state`**Type**: `STRUCT`**Provider name**: `properties.privateLinkServiceConnectionState`**Description**: A collection of information about the state of the connection between service consumer and provider.
  - `action_required`**Type**: `STRING`**Provider name**: `actionRequired`**Description**: A message indicating if changes on the service provider require any updates on the consumer.
  - `description`**Type**: `STRING`**Provider name**: `description`**Description**: The reason for approval/rejection of the connection.
  - `status`**Type**: `STRING`**Provider name**: `status`**Description**: Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- `provisioning_state`**Type**: `STRING`**Provider name**: `properties.provisioningState`**Description**: The provisioning state of the private endpoint connection resource.
- `type`**Type**: `STRING`**Provider name**: `type`**Description**: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

## `provisioning_state`{% #provisioning_state %}

**Type**: `STRING`**Provider name**: `properties.provisioningState`**Description**: Gets the status of the storage account at the time the operation was called.

## `public_network_access`{% #public_network_access %}

**Type**: `STRING`**Provider name**: `properties.publicNetworkAccess`**Description**: Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.

## `resource_group`{% #resource_group %}

**Type**: `STRING`

## `secondary_endpoints`{% #secondary_endpoints %}

**Type**: `STRUCT`**Provider name**: `properties.secondaryEndpoints`**Description**: Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.

- `blob`**Type**: `STRING`**Provider name**: `blob`**Description**: Gets the blob endpoint.
- `dfs`**Type**: `STRING`**Provider name**: `dfs`**Description**: Gets the dfs endpoint.
- `file`**Type**: `STRING`**Provider name**: `file`**Description**: Gets the file endpoint.
- `queue`**Type**: `STRING`**Provider name**: `queue`**Description**: Gets the queue endpoint.
- `table`**Type**: `STRING`**Provider name**: `table`**Description**: Gets the table endpoint.
- `web`**Type**: `STRING`**Provider name**: `web`**Description**: Gets the web endpoint.

## `secondary_location`{% #secondary_location %}

**Type**: `STRING`**Provider name**: `properties.secondaryLocation`**Description**: Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.

## `sku`{% #sku %}

**Type**: `STRUCT`**Provider name**: `sku`**Description**: Gets the SKU.

- `name`**Type**: `STRING`**Provider name**: `name`
- `tier`**Type**: `STRING`**Provider name**: `tier`

## `status_of_primary`{% #status_of_primary %}

**Type**: `STRING`**Provider name**: `properties.statusOfPrimary`**Description**: Gets the status indicating whether the primary location of the storage account is available or unavailable.

## `status_of_secondary`{% #status_of_secondary %}

**Type**: `STRING`**Provider name**: `properties.statusOfSecondary`**Description**: Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.

## `subscription_id`{% #subscription_id %}

**Type**: `STRING`

## `subscription_name`{% #subscription_name %}

**Type**: `STRING`

## `supports_https_traffic_only`{% #supports_https_traffic_only %}

**Type**: `BOOLEAN`**Provider name**: `properties.supportsHttpsTrafficOnly`**Description**: Allows https traffic only to storage service if sets to true.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `type`{% #type %}

**Type**: `STRING`**Provider name**: `type`**Description**: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"