Public preview: Prevent Shared key authorisation on Azure Storage accounts
Published date: 21 January, 2021
Every secure request to an Azure Storage account must be authorised. By default, requests can be authorised with either Azure Active Directory (Azure AD) credentials, or by using the account access key for shared key authorisation. Of these two types of authorisation, Azure AD provides superior security and ease of use over shared key and is recommended by Microsoft. To require clients to use Azure AD to authorise requests, you can disallow requests to the storage account that are authorised with shared key.
We’re announcing the public preview of the ability to disable shared key authorisation for Azure Storage. Before you disable shared key authorisation on existing storage accounts, we suggest checking existing access patterns via monitoring.