Azure Compliance ControlsAzure Storage
Blob containers should have 'Public access level' set to 'Private'
Disable anonymous access to blob containers and disallow blob public access on storage account. The powerpipe check is titled "Ensure that 'Public access level' is set to Private for blob containers".
What this control checks
Blob containers must have Public access level set to Private
Framework mappings
The clauses this control is mapped to in each framework.
- 3.5 Ensure that 'Public access level' is set to Private for blob containers
- 3.5 Ensure that 'Public access level' is set to Private for blob containers
- 3.7 Ensure that 'Public access level' is disabled for storage accounts with blob containers
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
storage_account_blob_containers_public_access_disabled - Powerpipe Control:
azure_compliance.control.storage_account_blob_containers_public_access_disabled
Last reviewed: 2026-10-15