az storage account create to set firewall rules

az storage account create that we can specify a few network firewall settings:

Network Rule Arguments

    --bypass                       : Bypass traffic for space-separated uses.  Allowed values:

                                     AzureServices, Logging, Metrics, None.

    --default-action               : Default action to apply when no rule matches.  Allowed values:

                                     Allow, Deny.

We are missing, though, the ability to grant access to a subnet or an IP range.  We are also missing this from Update.

Powershell supports this:

New-AzStorageAccount [-ResourceGroupName] [-Name] [-SkuName] [-Location] [-Kind ] [-AccessTier ] [-CustomDomainName ] [-UseSubDomain ] [-Tag ] [-EnableHttpsTrafficOnly ] [-AssignIdentity] [-NetworkRuleSet ] [-EnableHierarchicalNamespace ] [-AsJob] [-DefaultProfile ] []
Add-AzStorageAccountNetworkRule [-ResourceGroupName] [-Name] -VirtualNetworkResourceId [-AsJob] [-DefaultProfile ] [-WhatIf] [-Confirm] []
Add-AzStorageAccountNetworkRule [-ResourceGroupName] [-Name] -IPAddressOrRange [-AsJob] [-DefaultProfile ] [-WhatIf] [-Confirm] []