Storage Account with restricted public access

Now subnets and ips can be passed into the module (there must be one or more of them for this to work)