Microsoft.Storage storageAccounts 2016-05-01

The storageAccounts resource type can be deployed to: Resource groups.

To learn about resource group deployments, see Bicep or ARM template.

Template format

To create a Microsoft.Storage/storageAccounts resource, add the following Bicep or JSON to your template.

resource symbolicname 'Microsoft.Storage/storageAccounts@2016-05-01' = {
  name: 'string'
  location: 'string'
  tags: {
    tagName1: 'tagValue1'
    tagName2: 'tagValue2'
  }
  sku: {
    name: 'string'
  }
  kind: 'string'
  properties: {
    accessTier: 'string'
    customDomain: {
      name: 'string'
      useSubDomainName: bool
    }
    encryption: {
      keySource: 'Microsoft.Storage'
      services: {
        blob: {
          enabled: bool
        }
      }
    }
  }
}

Property values

storageAccounts

Name Description Value
type The resource type

For Bicep, set this value in the resource declaration.
'Microsoft.Storage/storageAccounts'
apiVersion The resource api version

For Bicep, set this value in the resource declaration.
'2016-05-01'
name The resource name string (required)
location Resource location string (required)
tags Tags assigned to a resource; can be used for viewing and grouping a resource (across resource groups). Dictionary of tag names and values. See Tags in templates
sku The SKU of the storage account. Sku (required)
kind Required. Indicates the type of storage account. 'BlobStorage'
'Storage'
properties Properties of the storage account. StorageAccountPropertiesCreateParameters

StorageAccountPropertiesCreateParameters

Name Description Value
accessTier Required for storage accounts where kind = BlobStorage. The access tier used for billing. 'Cool'
'Hot'
customDomain The custom domain assigned to this storage account. This can be set via Update. CustomDomain
encryption The encryption settings on the storage account. Encryption

CustomDomain

Name Description Value
name Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source. string (required)
useSubDomainName Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates. bool

Encryption

Name Description Value
keySource The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage 'Microsoft.Storage'
services A list of services that support encryption. EncryptionServices

EncryptionServices

Name Description Value
blob A service that allows server-side encryption to be used. EncryptionService

EncryptionService

Name Description Value
enabled A boolean indicating whether or not the service encrypts the data as it is stored. bool

Sku

Name Description Value
name Gets or sets the sku name. Required for account creation; optional for update. Note that in older versions, sku name was called accountType. 'Premium_LRS'
'Standard_GRS'
'Standard_LRS'
'Standard_RAGRS'
'Standard_ZRS'

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
Connect to a storage account from a VM via private endpoint

Deploy to Azure
This sample shows how to use connect a virtual network to access a blob storage account via private endpoint.
Connect to an Azure File Share via a Private Endpoint

Deploy to Azure
This sample shows how to use configure a virtual network and private DNS zone to access an Azure File Share via a private endpoint.
Create a Standard Storage Account

Deploy to Azure
This template creates a Standard Storage Account
Create a Storage Account with SSE

Deploy to Azure
This template creates a Storage Account with Storage Service Encryption for Data at Rest
Storage account with Advanced Threat Protection.

Deploy to Azure
This template allows you to deploy an Azure Storage account with Advanced Threat Protection enabled.
Create Storage Account and Blob Container

Deploy to Azure
Creates an Azure Storage account and a blob container. Template originally authored by John Downs.
Storage Account with SSE and blob deletion retention policy

Deploy to Azure
This template creates a Storage Account with Storage Service Encryption and a blob deletion retention policy
Create a storage account with file share

Deploy to Azure
Creates an Azure storage account and file share.
Create a storage account with multiple Blob containers

Deploy to Azure
Creates an Azure storage account and multiple blob containers.
Create a storage account with multiple file shares

Deploy to Azure
Creates an Azure storage account and multiple file shares.