IStorageAccount Interface

Required for storage accounts where kind = BlobStorage. The access tier used for billing.

Specifies the security identifier (SID) for Azure Storage.

Specifies the domain GUID.

Specifies the primary domain that the AD DNS server is authoritative for.

Specifies the security identifier (SID).

Specifies the Active Directory forest to get.

Specifies the NetBIOS domain name.

Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.

Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.

Indicates the directory service used.

A boolean indicating whether or not the service encrypts the data as it is stored.

Gets a rough estimate of the date/time when the encryption was last enabled by the user. Only returned when encryption is enabled. There might be some unencrypted blobs which were written after this time, as it is just a rough estimate.

Gets the creation date and time of the storage account in UTC.

Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.

Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.

Allows https traffic only to storage service if sets to true.

The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault

If the failover is in progress, the value will be true, otherwise, it will be null.

A boolean indicating whether or not the service encrypts the data as it is stored.

Gets a rough estimate of the date/time when the encryption was last enabled by the user. Only returned when encryption is enabled. There might be some unencrypted blobs which were written after this time, as it is just a rough estimate.

A boolean flag which indicates whether or not account failover is supported for the account.

All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.

The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

The principal ID of resource identity.

The tenant ID of resource.

The identity type.

Account HierarchicalNamespace enabled if sets to true.

The name of KeyVault key.

The Uri of KeyVault.

The version of KeyVault key.

Gets the Kind.

Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.

Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.

The geo-location where the resource lives

Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.

The name of the resource

Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.

Specifies the default action of allow or deny when no other rules match.

Sets the IP ACL rules

Sets the virtual network rules

Gets the blob endpoint.

Gets the dfs endpoint.

Gets the file endpoint.

Gets the queue endpoint.

Gets the table endpoint.

Gets the web endpoint.

Gets the location of the primary data center for the storage account.

Gets the status of the storage account at the time the operation was called.

A boolean indicating whether or not the service encrypts the data as it is stored.

Gets a rough estimate of the date/time when the encryption was last enabled by the user. Only returned when encryption is enabled. There might be some unencrypted blobs which were written after this time, as it is just a rough estimate.

Gets the blob endpoint.

Gets the dfs endpoint.

Gets the file endpoint.

Gets the queue endpoint.

Gets the table endpoint.

Gets the web endpoint.

Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.

The capability information in the specified SKU, including file encryption, network ACLs, change notification, etc.

Indicates the type of storage account.

The set of locations that the SKU is available. This will be supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.).

Gets or sets the SKU name. Required for account creation; optional for update. Note that in older versions, SKU name was called accountType.

The type of the resource, usually it is 'storageAccounts'.

The restrictions because of which SKU cannot be used. This is empty if there are no restrictions.

Gets the SKU tier. This is based on the SKU name.

Gets the status indicating whether the primary location of the storage account is available or unavailable.

Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.

A boolean indicating whether or not the service encrypts the data as it is stored.

Gets a rough estimate of the date/time when the encryption was last enabled by the user. Only returned when encryption is enabled. There might be some unencrypted blobs which were written after this time, as it is just a rough estimate.

Resource tags.

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"