From d6031ae87a7bbfe0a44b0848de28c6a081267ab4 Mon Sep 17 00:00:00 2001
From: Sanne Raymaekers <sanne.raymaekers@gmail.com>
Date: Fri, 6 Sep 2024 14:51:35 +0200
Subject: [PATCH] upload/azure: turn off public access on storage accounts

Users might have compliance policies on their azure accounts which
forbid public access on storage accounts.
---
 internal/upload/azure/azure.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/internal/upload/azure/azure.go b/internal/upload/azure/azure.go
index 5bc7eb70e..bbc09dee3 100644
--- a/internal/upload/azure/azure.go
+++ b/internal/upload/azure/azure.go
@@ -111,7 +111,8 @@ func (ac Client) CreateStorageAccount(ctx context.Context, resourceGroup, name,
 			tag.Name: &tag.Value,
 		},
 		Properties: &armstorage.AccountPropertiesCreateParameters{
-			MinimumTLSVersion: common.ToPtr(armstorage.MinimumTLSVersionTLS12),
+			AllowBlobPublicAccess: common.ToPtr(false),
+			MinimumTLSVersion:     common.ToPtr(armstorage.MinimumTLSVersionTLS12),
 		},
 	}, nil)
 	if err != nil {