Skip to content

storage-network-security-manage-exceptions.md

Latest commit

 

History

History
81 lines (52 loc) · 2.83 KB

storage-network-security-manage-exceptions.md

File metadata and controls

81 lines (52 loc) · 2.83 KB
title Manage network security exceptions for Azure Storage
description Learn how to enable traffic from an Azure service outside of the network boundary by adding a *network security exception*.
services storage
author normesta
ms.service azure-storage
ms.subservice storage-common-concepts
ms.topic how-to
ms.date 08/25/2025
ms.author normesta

Manage network security exceptions for Azure Storage

You can enable traffic from Azure services outside of your network boundary by adding a network security exception.

For a complete list of trusted Azure services, see Trusted Azure services.

Add a network security exception

Portal

  1. Navigate to the storage account for which you want to manage exceptions.

  2. In the service menu, under Security + networking, select Networking, and then under Resource settings: Virtual networks, IP addresses, and exceptions, select View.

  3. Under Exceptions, select the exceptions that you want to grant.

  4. Select Save to apply your changes.

PowerShell

  1. Install Azure PowerShell and sign in.

  2. Display the exceptions for the storage account network rules:

    (Get-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount").Bypass

  3. Configure the exceptions for the storage account network rules:

    Update-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount" -Bypass AzureServices,Metrics,Logging

  4. Remove the exceptions from the storage account network rules:

    Update-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount" -Bypass None

Azure CLI

  1. Install the Azure CLI and sign in.

  2. Display the exceptions for the storage account network rules:

    az storage account show --resource-group "myresourcegroup" --name "mystorageaccount" --query networkRuleSet.bypass

  3. Configure the exceptions for the storage account network rules:

    az storage account update --resource-group "myresourcegroup" --name "mystorageaccount" --bypass Logging Metrics AzureServices

  4. Remove the exceptions from the storage account network rules:

    az storage account update --resource-group "myresourcegroup" --name "mystorageaccount" --bypass None

See also