Storage account configuration discrepancy with provider vs portal

Terraform Providers Azure
1

Am I missing something or is this an issue or a potential future change: I deployed a storage account with BlockBlobStorage and HNS enabled. I also chose to enable infrastructure encryption and, as per the documentation this was not allowed, the error saying you must not enable infrastructure encryption without it being StorageV2. But I had previously created a storage account with this configuration successfully in the Azure portal.

Searches didn’t find anything on the matter. I don’t see any nice way to post this, but here is the ARM export:

{

    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "storageAccounts_testingdeleteme_name": {
            "defaultValue": "testingdeleteme",
            "type": "String"
        }
    },
    "variables": {},
    "resources": [
        {
            "type": "Microsoft.Storage/storageAccounts",
            "apiVersion": "2021-06-01",
            "name": "[parameters('storageAccounts_testingdeleteme_name')]",
            "location": "usgovvirginia",
            "tags": {
                "AppName": "LogDataLake",
                "CostCenter": "center",
                "Customer": "P3",
                "Environment": "dev",
                "Requestor": "P3"
            },
            "sku": {
                "name": "Premium_LRS",
                "tier": "Premium"
            },
            "kind": "BlockBlobStorage",
            "properties": {
                "minimumTlsVersion": "TLS1_2",
                "allowBlobPublicAccess": false,
                "allowSharedKeyAccess": true,
                "isHnsEnabled": true,
                "networkAcls": {
                    "bypass": "AzureServices",
                    "virtualNetworkRules": [],
                    "ipRules": [],
                    "defaultAction": "Allow"
                },
                "supportsHttpsTrafficOnly": true,
                "encryption": {
                    "requireInfrastructureEncryption": true,
                    "services": {
                        "file": {
                            "keyType": "Account",
                            "enabled": true
                        },
                        "blob": {
                            "keyType": "Account",
                            "enabled": true
                        }
                    },
                    "keySource": "Microsoft.Storage"
                }
            }
        },
        {
            "type": "Microsoft.Storage/storageAccounts/blobServices",
            "apiVersion": "2021-06-01",
            "name": "[concat(parameters('storageAccounts_testingdeleteme_name'), '/default')]",
            "dependsOn": [
                "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_testingdeleteme_name'))]"
            ],
            "sku": {
                "name": "Premium_LRS",
                "tier": "Premium"
            },
            "properties": {
                "cors": {
                    "corsRules": []
                },
                "deleteRetentionPolicy": {
                    "enabled": true,
                    "days": 7
                }
            }
        }
    ]
}
2

I’m receiving a similar issue while deploying a Storage Account with FileStorage and Infrastructure Encryption enabled as well using Terraform. I’m able to manually create this using Azure CLI and through the Portal with the same settings without any issues.

azurerm_storage_account:

access_tier = “Hot”
account_kind = “FileStorage”
account_replication_type = “ZRS”
account_tier = “Premium”
infrastructure_encryption_enabled = true

Error: infrastructure_encryption_enabled can only be used with account kind StorageV2, or account tier Premium and account kind BlockBlobStorage