---
title: Public network access should be disabled for Azure Storage Accounts
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Public network access should be
  disabled for Azure Storage Accounts
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Public network access should be disabled for Azure Storage Accounts
 
## Description{% #description %}

Azure Storage accounts should set public network access to `Disabled`, so the account cannot be reached directly from the internet. Before you disable it, set up virtual network integration or [private endpoints](https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints) for every service or user that needs access. After the change, manage access with shared access signatures or Microsoft Entra ID role-based access control.

## Remediation{% #remediation %}

Set **Public network access** to **Disabled** on each storage account. See [Set the default public network access rule](https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security-set-default-access).

## References{% #references %}

- [Use private endpoints for Azure Storage](https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints)
- [Set the default public network access rule](https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security-set-default-access)
- [az storage account](https://learn.microsoft.com/en-us/cli/azure/storage/account)
- [CIS Microsoft Azure Foundations Benchmark](https://www.cisecurity.org/benchmark/azure)