Azure / Azure/bicep

New linter rules for storage account best practices

Open
#8,725 3 comments 1 reaction 0 assignees View on GitHub
devdiv help wanted P1 story: linter rules
Dominant language
Bicep
Stars
3.6k
Forks
830
Avg merge
1d 2h
Merged PRs (30d)
79

Description

There's a set of best-practive property values for new storage accounts that should be set explicitly to overwrite the [ARM template defaults](https://learn.microsoft.com/en-us/azure/templates/microsoft.storage/storageaccounts?pivots=deployment-language-bicep):

```bicep
resource storageAccount 'Microsoft.Storage/storageAccounts@2019-04-01' = {
/*...*/
kind: 'StorageV2'
properties: {
allowBlobPublicAccess: false
supportsHttpsTrafficOnly: true
minimumTlsVersion: 'TLS1_2'
}
}
```

The issue is about creating a new linter rule to remind about these settings.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the linked Azure ARM template defaults and the Bicep linter's existing rule conventions. The work is done when a linter rule reminds users to explicitly set allowBlobPublicAccess, supportsHttpsTrafficOnly, and minimumTlsVersion for new storage accounts.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.