From fad040bed452831dc0509ff23dc6a4b0100bee78 Mon Sep 17 00:00:00 2001
From: Ana Clara Zoppi Serpa <azoppiserpa@microsoft.com>
Date: Wed, 29 May 2024 15:26:27 -0700
Subject: [PATCH] adding allowSharedAccessKey false

---
 pkg/deploy/assets/rp-production.json | 3 +++
 pkg/deploy/generator/resources_rp.go | 5 ++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/pkg/deploy/assets/rp-production.json b/pkg/deploy/assets/rp-production.json
index e9d30915dc0..6c997319ac1 100644
--- a/pkg/deploy/assets/rp-production.json
+++ b/pkg/deploy/assets/rp-production.json
@@ -539,6 +539,9 @@
             "sku": {
                 "name": "Standard_LRS"
             },
+            "properties": {
+                "allowSharedKeyAccess": false
+            },
             "location": "[resourceGroup().location]",
             "name": "[substring(parameters('storageAccountDomain'), 0, indexOf(parameters('storageAccountDomain'), '.'))]",
             "type": "Microsoft.Storage/storageAccounts",
diff --git a/pkg/deploy/generator/resources_rp.go b/pkg/deploy/generator/resources_rp.go
index 50deca0fb83..f421a851158 100644
--- a/pkg/deploy/generator/resources_rp.go
+++ b/pkg/deploy/generator/resources_rp.go
@@ -1561,5 +1561,8 @@ func (g *generator) rpVersionStorageAccount() []*arm.Resource {
 }
 
 func (g *generator) rpStorageAccount() *arm.Resource {
-	return g.storageAccount("[substring(parameters('storageAccountDomain'), 0, indexOf(parameters('storageAccountDomain'), '.'))]", nil, nil)
+	accountProperties := mgmtstorage.AccountProperties{
+		AllowSharedKeyAccess: to.BoolPtr(false),
+	}
+	return g.storageAccount("[substring(parameters('storageAccountDomain'), 0, indexOf(parameters('storageAccountDomain'), '.'))]", &accountProperties, nil)
 }