Microsoft.Storage storageAccounts template reference

Template format

To create a Microsoft.Storage/storageAccounts resource, add the following JSON to the resources section of your template.

{
  "name": "string",
  "type": "Microsoft.Storage/storageAccounts",
  "apiVersion": "2016-05-01",
  "sku": {
    "name": "string"
  },
  "kind": "string",
  "location": "string",
  "tags": {},
  "properties": {
    "customDomain": {
      "name": "string",
      "useSubDomainName": "boolean"
    },
    "encryption": {
      "services": {
        "blob": {
          "enabled": "boolean"
        }
      },
      "keySource": "Microsoft.Storage"
    },
    "accessTier": "string"
  }
}

Property values

The following tables describe the values you need to set in the schema.

Microsoft.Storage/storageAccounts object

Name Type Required Value
name string Yes The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
Min length: 3
Max length: 24
type enum Yes Microsoft.Storage/storageAccounts
apiVersion enum Yes 2016-05-01
sku object Yes Required. Gets or sets the sku name. - Sku object
kind enum Yes Required. Indicates the type of storage account. - Storage or BlobStorage
location string Yes Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
tags object No Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
properties object Yes StorageAccountPropertiesCreateParameters object

Sku object

Name Type Required Value
name enum Yes Gets or sets the sku name. Required for account creation; optional for update. Note that in older versions, sku name was called accountType. - Standard_LRS, Standard_GRS, Standard_RAGRS, Standard_ZRS, Premium_LRS

StorageAccountPropertiesCreateParameters object

Name Type Required Value
customDomain object No User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property. - CustomDomain object
encryption object No Provides the encryption settings on the account. If left unspecified the account encryption settings will remain the same. The default setting is unencrypted. - Encryption object
accessTier enum No Required for storage accounts where kind = BlobStorage. The access tier used for billing. - Hot or Cool

CustomDomain object

Name Type Required Value
name string Yes Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
useSubDomainName boolean No Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.

Encryption object

Name Type Required Value
services object No List of services which support encryption. - EncryptionServices object
keySource enum Yes The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage - Microsoft.Storage

EncryptionServices object

Name Type Required Value
blob object No The encryption function of the blob storage service. - EncryptionService object

EncryptionService object

Name Type Required Value
enabled boolean No A boolean indicating whether or not the service encrypts the data as it is stored.

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
Create a Standard Storage Account

Deploy to Azure
This template creates a Standard Storage Account
Create Storage Account and Blob Container

Deploy to Azure
Creates an Azure Storage account and a blob container. Template originally authored by John Downs.
Create a storage account with file share

Deploy to Azure
Creates an Azure storage account and file share.
Create a storage account with multiple Blob containers

Deploy to Azure
Creates an Azure storage account and multiple blob containers.
Create a storage account with multiple file shares

Deploy to Azure
Creates an Azure storage account and multiple file shares.
Create a Storage Account with SSE

Deploy to Azure
This template creates a Storage Account with Storage Service Encryption for Data at Rest
Storage account with Advanced Threat Protection.

Deploy to Azure
This template allows you to deploy an Azure Storage account with Advanced Threat Protection enabled.