logo

Database

Azure Public Blobs Allowed

Description

Detects Azure Storage Accounts that allow public blob access, which could enable anonymous access to blob containers without authentication. This configuration can lead to data exposure if containers are set to public, making sensitive data accessible to anyone with the blob URL.

Detection Strategy

    Checks each Azure Storage Account's 'allow_blob_public_access' setting

    Reports a vulnerability if 'allow_blob_public_access' is set to true

    Examines only the account-level setting that controls whether public blob access is permitted