Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Storage] BREAKING CHANGE: az storage account create: Server change the default value to False for --allow-blob-public-access and --allow-cross-tenant-replication #27014

Open
calvinhzy opened this issue Jul 27, 2023 · 1 comment
Assignees
Labels
Auto-Assign Auto assign by bot Azure CLI Team The command of the issue is owned by Azure CLI team Breaking Change feature-request Storage az storage
Milestone

Comments

@calvinhzy
Copy link
Member

calvinhzy commented Jul 27, 2023

Describe the bug

Beginning August 2023, there will be server breaking changes to these default security settings when creating a storage account, changes are expected to be completed by 12/5

  • --allow-blob-public-access will default to False instead of True now
  • --allow-cross-tenant-replication will default to False instead of True now.

Please see the blog post about the security risk and server change details:
https://techcommunity.microsoft.com/t5/azure-storage-blog/azure-storage-updating-some-default-security-settings-on-new/ba-p/3819554

Related command

az storage account create

Errors

--allow-blob-public-access and --allow-cross-tenant-replication default to False

Issue script & Debug output

N/A

Expected behavior

--allow-blob-public-access and --allow-cross-tenant-replication will default to False starting August 2023

Environment Summary

azure-cli 2.50.0

core 2.50.0
telemetry 1.1.0

Additional context

No response

@calvinhzy calvinhzy added the bug This issue requires a change to an existing behavior in the product in order to be resolved. label Jul 27, 2023
@ghost ghost added the Storage az storage label Jul 27, 2023
@ghost ghost added this to the Backlog milestone Jul 27, 2023
@ghost ghost assigned evelyn-ys Jul 27, 2023
@yonzhan
Copy link
Collaborator

yonzhan commented Jul 27, 2023

Thank you for opening this issue, we will look into it.

@ghost ghost added the Auto-Assign Auto assign by bot label Jul 27, 2023
@calvinhzy calvinhzy added Breaking Change bug This issue requires a change to an existing behavior in the product in order to be resolved. and removed Auto-Assign Auto assign by bot bug This issue requires a change to an existing behavior in the product in order to be resolved. labels Jul 27, 2023
@calvinhzy calvinhzy assigned calvinhzy and unassigned evelyn-ys Jul 27, 2023
@microsoft-github-policy-service microsoft-github-policy-service bot added Auto-Assign Auto assign by bot Azure CLI Team The command of the issue is owned by Azure CLI team question The issue doesn't require a change to the product in order to be resolved. Most issues start as that labels Jul 27, 2023
@calvinhzy calvinhzy pinned this issue Jul 27, 2023
@yonzhan yonzhan removed the question The issue doesn't require a change to the product in order to be resolved. Most issues start as that label Jul 27, 2023
@yonzhan yonzhan added feature-request and removed bug This issue requires a change to an existing behavior in the product in order to be resolved. labels Aug 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Auto-Assign Auto assign by bot Azure CLI Team The command of the issue is owned by Azure CLI team Breaking Change feature-request Storage az storage
Projects
None yet
Development

No branches or pull requests

3 participants