How to resolve Sprinto check to disable blob anonymous access on the Azure Cloud Storage account
About:
Sprinto Check: Ensure that 'Allow Blob Anonymous Access' is set to 'Disabled'
This Sprinto check verifies that the 'Allow Blob Anonymous Access' setting is disabled for your Azure storage accounts. This setting determines whether anonymous (non-authenticated) users can access blobs (files and data) within the storage account.
Purpose:
The primary purpose of disabling 'Allow Blob Anonymous Access' is to enhance the security of your Azure storage accounts by restricting anonymous access to your data. By default, this setting is disabled, ensuring that only authenticated users or applications with the appropriate permissions can access the blobs in your storage account.
How to fix this check:
Follow the below steps to resolve this check:
Before you begin
Ensure you have the administrator privilege to manage Azure storage account configuration.
Disabling Cross-Tenant Replication
Log in to the Azure Portal using your credentials.
Navigate to the Storage Accounts service.
Select the storage account from the list for which you wish to change the configuration.
Click Configuration under the Settings from the left-side navigation blade.
Disable the Allow Blob anonymous access setting, and click Save to apply the changes.
Repeat the above steps for all Azure cloud storage accounts that store the organization’s critical data.
Sprinto will detect the configuration change and set the check status to "Passing."
Contact Sprinto support if you have any queries related to the check or need assistance.