{"id":4538,"date":"2023-07-17T09:13:39","date_gmt":"2023-07-17T09:13:39","guid":{"rendered":"https:\/\/davidpapkin.net\/?p=4538"},"modified":"2023-07-17T09:13:39","modified_gmt":"2023-07-17T09:13:39","slug":"microsoft-is-changing-two-default-security-settings-in-new-azure-storage-accounts-beginning-in-august-2023","status":"publish","type":"post","link":"https:\/\/davidpapkin.com\/?p=4538","title":{"rendered":"Microsoft is changing two default security settings in new Azure Storage accounts beginning in August 2023"},"content":{"rendered":"\n

I received this from Microsoft May 18 2023.<\/p>\n\n\n\n

Default security settings for new Azure Storage accounts will be updated.<\/h1>\n\n\n\n

Microsoft is changing two default security settings in new Azure Storage accounts beginning in August 2023<\/h1>\n\n\n\n

You’re receiving this email because you use Azure Storage.<\/em><\/p>\n\n\n\n

To align with security best practices, anonymous public access and cross-tenant replication settings in new Azure Storage accounts will soon be disabled by default in all clouds. We’ll begin making this change across Azure regions on a rolling basis in August 2023.<\/p>\n\n\n\n

We’re turning these settings off to help prevent unintentional or malicious data access or replication in all new storage accounts created through any client, the storage REST API, and SDKs.<\/p>\n\n\n\n

We recommend keeping these settings disabled. However, if you prefer to turn them on in accounts that you create after this change is implemented, learn how to enable anonymous access<\/a> and cross-tenant replication<\/a>. You may also completely opt out of the anonymous access setting being disabled by registering for “EnableAnonymousAccessForNewStorageAccounts” in the Azure portal<\/a>, PowerShell<\/a>, or REST API<\/a> before August 2023.<\/p>\n\n\n\n

If you use Azure Policy to enforce authorized access for storage accounts<\/a> with “Deny” effect or replication within the same tenant<\/a>, these settings will already be disabled and new accounts will not be affected.<\/p>\n\n\n\n

Help and support<\/h2>\n\n\n\n

If you have questions, get answers from community experts in Microsoft Q&A<\/a>. If you have a support plan and you need technical help, create a support request<\/a>:<\/p>\n\n\n\n

    \n
  1. For Issue type<\/em>, select Technical.<\/li>\n\n\n\n
  2. For Subscription<\/em>, select your subscription.<\/li>\n\n\n\n
  3. For Service<\/em>, select My services.<\/li>\n\n\n\n
  4. For Service type<\/em>, select Blob Storage.<\/li>\n\n\n\n
  5. For Resource<\/em>, select the Azure resource you are creating a support request for.<\/li>\n\n\n\n
  6. For Summary<\/em>, type a description of your issue.<\/li>\n\n\n\n
  7. For Problem type<\/em>, select Authentication and Authorization for anonymous access or Data Migration for cross-tenant replication.<\/li>\n\n\n\n
  8. For Problem subtype<\/em>, select Issues using Anonymous Access for anonymous access or Issues with object replication for cross-tenant replication.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

    I received this from Microsoft May 18 2023. Default security settings for new Azure Storage accounts will be updated. Microsoft is changing two default security settings in new Azure Storage accounts beginning in August 2023 You’re receiving this email because… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-4538","post","type-post","status-publish","format-standard","hentry","category-david-papkin"],"_links":{"self":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/4538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4538"}],"version-history":[{"count":0,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/4538\/revisions"}],"wp:attachment":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}