StorageAccount Class

Creates a new StorageAccount.

Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.

Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.

Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.

Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.

Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.

Provides the identity based authentication settings for Azure Files.

Gets or sets the the Bicep identifier name of the resource. This can be used to refer to the resource in expressions, but is not the Azure name of the resource. This value can contain letters, numbers, and underscores.

Blob restore status.

Gets the creation date and time of the storage account in UTC.

User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property.

Declares explicit dependencies on other resources.

Declares explicit dependencies on other resources.

Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.

Allows https traffic only to storage service if sets to true. The default value is true since API version 2019-04-01.

Encryption settings to be used for server-side encryption for the storage account.

Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location.

Geo Replication Stats.

Gets the Id.

Gets or sets the the Bicep identifier name of the resource. This can be used to refer to the resource in expressions, but is not the Azure name of the resource. This value can contain letters, numbers, and underscores.

The identity of the resource.

The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the new containers in the account by default.

A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.

Gets whether this is referencing an existing resource or we're defining a new resource.

Gets whether this is referencing an existing resource or we're defining a new resource.

If the failover is in progress, the value will be true, otherwise, it will be null.

Account HierarchicalNamespace enabled if sets to true.

Enables local users feature, if set to true.

NFS 3.0 protocol support enabled if set to true.

Enables Secure File Transfer Protocol, if set to true.

Storage account keys creation time.

The key expiration period in days.

Required. Indicates the type of storage account.

Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.

Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.

Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.

Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.

The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.

Network rule set.

Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.

Gets the location of the primary data center for the storage account.

List of private endpoint connection associated with the specified storage account.

Gets the status of the storage account at the time the operation was called.

Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.

Gets the type of the resource.

Gets the type of the resource.

Gets or sets the version of the resource.

Gets or sets the version of the resource.

Maintains information about the network routing choice opted by the user for data transfer.

SasPolicy assigned to the storage account.

Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.

Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.

Required. Gets or sets the SKU name.

Gets the status indicating whether the primary location of the storage account is available or unavailable.

Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.

This property is readOnly and is set by server during asynchronous storage account sku conversion operations.

Gets the SystemData.

Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.

Compose the resource into a provisioning plan that can be saved as Bicep or deployed directly.

Compose the resource into a provisioning plan that can be saved as Bicep or deployed directly.

Compile the resource into a set of Bicep statements.

Compile the resource into a set of Bicep statements.

Creates a role assignment for a principal that grants access to this StorageAccount.

Creates a role assignment for a user-assigned identity that grants access to this StorageAccount.

Define all the provisionable properties of StorageAccount.

Creates a reference to an existing StorageAccount.

Get access keys for this StorageAccount resource.

Get any resources represented by this object. This will typically only be the object itself for everything but Infrastructure.

Get any resources represented by this object. This will typically only be the object itself for everything but Infrastructure.

Initialize this construct.

Set this construct to represent the result of an expression. This is primarily meant to be called via FromExpression static methods on specific resources or constructs.

Resolve any resources or properties that were not explicitly specified.

Resolve any resources or properties that were not explicitly specified.

Resolve any resources or properties that were not explicitly specified.

Resolve any resources or properties that were not explicitly specified.

Validate the presence of any required members.

Validate the presence of any required members.

Validate the presence of any required members.

Validate the presence of any required members.

Assign a value to this property.

Compile this value to a Bicep expression.

Gets the expression for this value if it's not a literal.

Gets whether this value is unset or empty.

Tracks whether this is an output only property.

Tracks whether this property is required.

Tracks whether this contains a secure value.

Gets the kind of this value (a literal value, an expression, or it's unset).

Get the value of this expression, if it's literal.

Gets information about where this value was defined.

Make this value readonly.

Gets information about where this value was assigned from.