Azure / Azure/azure-cli

[Storage] BREAKING CHANGE: `az storage account create`: Server change the default value to `False` for `--allow-blob-public-access` and `--allow-cross-tenant-replication`

Open
#27,014 1 comment 0 reactions 2 assignees Claimed by @evelyn-ys View on GitHub
act-codegen-extensibility-squad Auto-Assign Azure CLI Team Breaking Change feature-request Storage
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 10h
Merged PRs (30d)
64

Description

### Describe the bug

Beginning August 2023, there will be server breaking changes to these default security settings when creating a storage account, changes are expected to be completed by 12/5

- `--allow-blob-public-access` will default to `False` instead of `True` now
- `--allow-cross-tenant-replication` will default to `False` instead of `True` now.

Please see the blog post about the security risk and server change details:
https://techcommunity.microsoft.com/t5/azure-storage-blog/azure-storage-updating-some-default-security-settings-on-new/ba-p/3819554

### Related command

`az storage account create`

### Errors

`--allow-blob-public-access` and `--allow-cross-tenant-replication` default to `False`

### Issue script & Debug output

N/A

### Expected behavior

`--allow-blob-public-access` and `--allow-cross-tenant-replication` will default to `False` starting August 2023

### Environment Summary

azure-cli 2.50.0

core 2.50.0
telemetry 1.1.0

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.