Update bkp sa permissions

Disable blob anonymous access
DFE-Digital · Nov 20, 2023 · 5f83d0e · 5f83d0e
1 parent 4d19aa6
commit 5f83d0e
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/aks/postgres/resources.tf b/aks/postgres/resources.tf
@@ -107,11 +107,12 @@ resource "azurerm_postgresql_flexible_server_database" "main" {
 resource "azurerm_storage_account" "backup" {
   count = local.azure_enable_backup_storage ? 1 : 0
 
-  name                     = "${var.azure_resource_prefix}${var.service_short}dbbkp${var.config_short}sa"
-  location                 = data.azurerm_resource_group.main[0].location
-  resource_group_name      = data.azurerm_resource_group.main[0].name
-  account_tier             = "Standard"
-  account_replication_type = "GRS"
+  name                            = "${var.azure_resource_prefix}${var.service_short}dbbkp${var.config_short}sa"
+  location                        = data.azurerm_resource_group.main[0].location
+  resource_group_name             = data.azurerm_resource_group.main[0].name
+  account_tier                    = "Standard"
+  account_replication_type        = "GRS"
+  allow_nested_items_to_be_public = false
 
   lifecycle { ignore_changes = [tags] }
 }