Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use of deployment scripts prohibit locking down Storage Accounts #228

Open
danielscholl opened this issue Nov 5, 2024 · 2 comments
Open
Assignees
Labels
bug Something isn't working P0
Milestone

Comments

@danielscholl
Copy link
Collaborator

danielscholl commented Nov 5, 2024

The solution currently uses deployment scripts for the following situations.

  1. Software Definition Uploads
  2. DAG Uploads

If the storage account is an existing storage account with either an ACL or Allow storage account key access - Disabled then the deployment script will fail.

This means that ACL's or allowSharedKeyAccess has to occur post Deployment Scripts if deployment scripts are to be used.

Reference Documentation

Image

@danielscholl danielscholl added the bug Something isn't working label Nov 5, 2024
Copy link

github-actions bot commented Nov 5, 2024

Thanks for raising your first issue, the team appreciates the time you have taken 😉

@danielscholl danielscholl self-assigned this Nov 9, 2024
@danielscholl danielscholl added this to the Security milestone Nov 12, 2024
@danielscholl
Copy link
Collaborator Author

Legal COO scripts need to be moved. Initial work done but haven't worked out bugs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working P0
Projects
None yet
Development

No branches or pull requests

1 participant