Ensure Private Endpoints are used to access Storage Accounts

Why This Matters

Without private endpoints, your Azure Storage accounts are accessible over the public internet, increasing the risk of data interception and unauthorized access. Using private endpoints ensures all traffic between your services and storage accounts stays within the Microsoft Azure backbone network, encrypted and isolated from external networks. This is critical for protecting sensitive data and maintaining a strong security posture.

What Aether365 Checks

This check verifies that each Azure Storage account is configured with a private endpoint to restrict network access. If you are using Aether365, this appears in your dashboard under the azure-storage-accounts category.

How to Fix

To enable private endpoint access for a Storage account, you need to create a private endpoint connection and disable public network access.

Microsoft references

• Storage private endpoints
• Virtual networks overview
• Create private endpoint portal
• Create private endpoint cli
• Create private endpoint powershell
• Tutorial private endpoint storage portal
• Mcsb network security