How to prevent anonymous public read access to containers?
After public access is disallowed for an account, containers in that account cannot be subsequently configured for public access. Any containers that have already been configured for public access will no longer accept anonymous requests. For more information, see Configure anonymous public read access for containers and blobs.
What are the requirements for public access file?
One such requirement is to maintain a file that is available for public inspection. This is referred to as the public access file (PAF). The requirements of the PAF, which is a vital component of employment-related immigration compliance, are discussed here.
What should be retained in an employer public access file?
Another important document to be retained in the PAF is the proof of notification to employees or the union representative (if any). The absence of appropriate posting of notification at the location of intended employment is a common LCA violation that can have serious consequences in the event of a DOL investigation.
Can a client change the public access level of a container?
Clients can enumerate blobs within the container by anonymous request, but cannot enumerate containers within the storage account. You cannot change the public access level for an individual blob. Public access level is set only at the container level.
When to enable anonymous access to BLOB data?
Operational complexity, human error, or malicious attack against data that is publicly accessible can result in costly data breaches. Microsoft recommends that you enable anonymous access only when necessary for your application scenario. By default, public access to your blob data is always prohibited.
Is there way to prevent public access to blobs?
By default, public access to your blob data is always prohibited. However, the default configuration for a storage account permits a user with appropriate permissions to configure public access to containers and blobs in a storage account.
Is it safe to have anonymous access to Azure containers?
Anonymous public read access to containers and blobs in Azure Storage is a convenient way to share data, but may also present a security risk. It’s important to manage anonymous access judiciously and to understand how to evaluate anonymous access to your data.