adding allowSharedAccessKey false

Azure · May 29, 2024 · fad040b · fad040b
1 parent 59a0b52
commit fad040b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/pkg/deploy/assets/rp-production.json b/pkg/deploy/assets/rp-production.json
@@ -539,6 +539,9 @@
             "sku": {
                 "name": "Standard_LRS"
             },
+            "properties": {
+                "allowSharedKeyAccess": false
+            },
             "location": "[resourceGroup().location]",
             "name": "[substring(parameters('storageAccountDomain'), 0, indexOf(parameters('storageAccountDomain'), '.'))]",
             "type": "Microsoft.Storage/storageAccounts",

diff --git a/pkg/deploy/generator/resources_rp.go b/pkg/deploy/generator/resources_rp.go
@@ -1561,5 +1561,8 @@ func (g *generator) rpVersionStorageAccount() []*arm.Resource {
 }
 
 func (g *generator) rpStorageAccount() *arm.Resource {
-	return g.storageAccount("[substring(parameters('storageAccountDomain'), 0, indexOf(parameters('storageAccountDomain'), '.'))]", nil, nil)
+	accountProperties := mgmtstorage.AccountProperties{
+		AllowSharedKeyAccess: to.BoolPtr(false),
+	}
+	return g.storageAccount("[substring(parameters('storageAccountDomain'), 0, indexOf(parameters('storageAccountDomain'), '.'))]", &accountProperties, nil)
 }