Am I missing something or is this an issue or a potential future change: I deployed a storage account with BlockBlobStorage and HNS enabled. I also chose to enable infrastructure encryption and, as per the documentation this was not allowed, the error saying you must not enable infrastructure encryption without it being StorageV2. But I had previously created a storage account with this configuration successfully in the Azure portal.
Searches didn’t find anything on the matter. I don’t see any nice way to post this, but here is the ARM export:
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccounts_testingdeleteme_name": {
"defaultValue": "testingdeleteme",
"type": "String"
}
},
"variables": {},
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2021-06-01",
"name": "[parameters('storageAccounts_testingdeleteme_name')]",
"location": "usgovvirginia",
"tags": {
"AppName": "LogDataLake",
"CostCenter": "center",
"Customer": "P3",
"Environment": "dev",
"Requestor": "P3"
},
"sku": {
"name": "Premium_LRS",
"tier": "Premium"
},
"kind": "BlockBlobStorage",
"properties": {
"minimumTlsVersion": "TLS1_2",
"allowBlobPublicAccess": false,
"allowSharedKeyAccess": true,
"isHnsEnabled": true,
"networkAcls": {
"bypass": "AzureServices",
"virtualNetworkRules": [],
"ipRules": [],
"defaultAction": "Allow"
},
"supportsHttpsTrafficOnly": true,
"encryption": {
"requireInfrastructureEncryption": true,
"services": {
"file": {
"keyType": "Account",
"enabled": true
},
"blob": {
"keyType": "Account",
"enabled": true
}
},
"keySource": "Microsoft.Storage"
}
}
},
{
"type": "Microsoft.Storage/storageAccounts/blobServices",
"apiVersion": "2021-06-01",
"name": "[concat(parameters('storageAccounts_testingdeleteme_name'), '/default')]",
"dependsOn": [
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_testingdeleteme_name'))]"
],
"sku": {
"name": "Premium_LRS",
"tier": "Premium"
},
"properties": {
"cors": {
"corsRules": []
},
"deleteRetentionPolicy": {
"enabled": true,
"days": 7
}
}
}
]
}