Interface StorageAccount

All Superinterfaces:
GroupableResource<StorageManager,StorageAccountInner>, HasId, HasInnerModel<StorageAccountInner>, HasManager<StorageManager>, HasName, HasResourceGroup, Indexable, Refreshable<StorageAccount>, Resource, SupportsListingPrivateEndpointConnection, SupportsListingPrivateLinkResource, SupportsUpdatingPrivateEndpointConnection, Updatable<StorageAccount.Update>

An immutable client-side representation of an Azure storage account.
  • Method Details

    • accountStatuses

      AccountStatuses accountStatuses()
      Gets the status indicating whether the primary and secondary location of the storage account is available or unavailable.
      Returns:
      the status indicating whether the primary and secondary location of the storage account is available or unavailable. Possible values include: 'Available', 'Unavailable'
    • skuType

      Gets the sku of this storage account.
      Returns:
      the sku of this storage account.
    • kind

      Kind kind()
      Gets the kind of the storage account.
      Returns:
      the kind of the storage account. Possible values are 'Storage', 'BlobStorage'.
    • creationTime

      OffsetDateTime creationTime()
      Gets the creation date and time of the storage account in UTC.
      Returns:
      the creation date and time of the storage account in UTC
    • customDomain

      CustomDomain customDomain()
      Gets the user assigned custom domain assigned to this storage account.
      Returns:
      the user assigned custom domain assigned to this storage account
    • lastGeoFailoverTime

      OffsetDateTime lastGeoFailoverTime()
      Gets the timestamp of the most recent instance of a failover to the secondary location.
      Returns:
      the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is StandardGRS or StandardRAGRS
    • provisioningState

      ProvisioningState provisioningState()
      Gets the status of the storage account.
      Returns:
      the status of the storage account at the time the operation was called. Possible values include: 'Creating', 'ResolvingDNS', 'Succeeded'
    • endPoints

      PublicEndpoints endPoints()
      Gets the URLs that are used to perform a retrieval of a public blob, queue or table object.
      Returns:
      the URLs that are used to perform a retrieval of a public blob, queue or table object. Note that StandardZRS and PremiumLRS accounts only return the blob endpoint
    • encryptionKeySource

      StorageAccountEncryptionKeySource encryptionKeySource()
      The source of the key used for encryption.

      StorageAccountEncryptionKeySource.MICROSOFT_STORAGE means that the Storage Account is encrypted using Microsoft-managed Key.

      StorageAccountEncryptionKeySource.MICROSOFT_KEYVAULT means that the Storage Account is encrypted using Customer-managed Key.

      Returns:
      the source of the key used for encryption.
    • encryptionStatuses

      Gets the encryption statuses indexed by storage service type.
      Returns:
      the encryption statuses indexed by storage service type.
    • infrastructureEncryptionEnabled

      boolean infrastructureEncryptionEnabled()
      Checks whether infrastructure encryption for Azure Storage data is enabled.
      Returns:
      whether infrastructure encryption for Azure Storage data is enabled.
    • accessTier

      AccessTier accessTier()
      Gets access tier used for billing.
      Returns:
      access tier used for billing. Access tier cannot be changed more than once every 7 days (168 hours). Access tier cannot be set for StandardLRS, StandardGRS, StandardRAGRS, or PremiumLRS account types. Possible values include: 'Hot', 'Cool'.
    • systemAssignedManagedServiceIdentityTenantId

      String systemAssignedManagedServiceIdentityTenantId()
      Gets the Managed Service Identity specific Active Directory tenant ID assigned to the storage account.
      Returns:
      the Managed Service Identity specific Active Directory tenant ID assigned to the storage account.
    • systemAssignedManagedServiceIdentityPrincipalId

      String systemAssignedManagedServiceIdentityPrincipalId()
      Gets the Managed Service Identity specific Active Directory service principal ID assigned to the storage account.
      Returns:
      the Managed Service Identity specific Active Directory service principal ID assigned to the storage account.
    • userAssignedManagedServiceIdentityIds

      Set<String> userAssignedManagedServiceIdentityIds()
      Gets the resource ids of User Assigned Managed Service Identities associated with the storage account.
      Returns:
      the resource ids of User Assigned Managed Service Identities associated with the storage account.
    • isAccessAllowedFromAllNetworks

      boolean isAccessAllowedFromAllNetworks()
      Checks whether authenticated application from any network is allowed to access the storage account.
      Returns:
      true if authenticated application from any network is allowed to access the storage account, false if only application from whitelisted network (subnet, ip address, ip address range) can access the storage account.
    • networkSubnetsWithAccess

      List<String> networkSubnetsWithAccess()
      Gets the list of resource id of virtual network subnet having access to the storage account.
      Returns:
      the list of resource id of virtual network subnet having access to the storage account.
    • ipAddressesWithAccess

      List<String> ipAddressesWithAccess()
      Gets the list of ip addresses having access to the storage account.
      Returns:
      the list of ip addresses having access to the storage account.
    • ipAddressRangesWithAccess

      List<String> ipAddressRangesWithAccess()
      Gets the list of ip address ranges having access to the storage account.
      Returns:
      the list of ip address ranges having access to the storage account.
    • canReadLogEntriesFromAnyNetwork

      boolean canReadLogEntriesFromAnyNetwork()
      Checks whether storage log entries can be read from any network.
      Returns:
      true if storage log entries can be read from any network, false otherwise
    • canReadMetricsFromAnyNetwork

      boolean canReadMetricsFromAnyNetwork()
      Checks storage metrics can be read from any network.
      Returns:
      true if storage metrics can be read from any network, false otherwise
    • canAccessFromAzureServices

      boolean canAccessFromAzureServices()
      Checks storage account can be accessed from applications running on azure.
      Returns:
      true if storage can be accessed from application running on azure, false otherwise
    • isAzureFilesAadIntegrationEnabled

      boolean isAzureFilesAadIntegrationEnabled()
      Checks whether Aad Integration is enabled for files on this storage account.
      Returns:
      true if Aad integration is enabled, false otherwise
    • isHnsEnabled

      boolean isHnsEnabled()
      Checks whether Hns is enabled on this storage account.
      Returns:
      true if Hns is enabled, false otherwise
    • isLargeFileSharesEnabled

      boolean isLargeFileSharesEnabled()
      Checks whether large file shares enabled on this storage account.
      Returns:
      true if large file shares is enabled, false otherwise
    • minimumTlsVersion

      MinimumTlsVersion minimumTlsVersion()
      Gets the minimum TLS version for HTTPS traffic.
      Returns:
      the minimum TLS version for HTTPS traffic.
    • isHttpsTrafficOnly

      boolean isHttpsTrafficOnly()
      Checks whether storage account only allow HTTPS traffic.
      Returns:
      true if only allow HTTPS traffic, false otherwise
    • isBlobPublicAccessAllowed

      boolean isBlobPublicAccessAllowed()
      Checks whether blob public access is allowed.
      Returns:
      true if blob public access is allowed, false otherwise
    • isSharedKeyAccessAllowed

      boolean isSharedKeyAccessAllowed()
      Checks whether shared key access is allowed.
      Returns:
      true if shared key access is allowed, false otherwise
    • getKeys

      Fetch the up-to-date access keys from Azure for this storage account.
      Returns:
      the access keys for this storage account
    • getKeysAsync

      Mono<List<StorageAccountKey>> getKeysAsync()
      Fetch the up-to-date access keys from Azure for this storage account asynchronously.
      Returns:
      a representation of the deferred computation of this call, returning the access keys
    • regenerateKey

      List<StorageAccountKey> regenerateKey(String keyName)
      Regenerates the access keys for this storage account.
      Parameters:
      keyName - if the key name
      Returns:
      the generated access keys for this storage account
    • regenerateKeyAsync

      Mono<List<StorageAccountKey>> regenerateKeyAsync(String keyName)
      Regenerates the access keys for this storage account asynchronously.
      Parameters:
      keyName - if the key name
      Returns:
      a representation of the deferred computation of this call, returning the regenerated access key
    • isAllowCrossTenantReplication

      boolean isAllowCrossTenantReplication()
      Checks whether cross tenant replication is allowed.
      Returns:
      true if cross tenant replication is enabled, false otherwise
    • isDefaultToOAuthAuthentication

      boolean isDefaultToOAuthAuthentication()
      Checks whether default to oauth authentication is allowed.
      Returns:
      true if default to oauth authentication is enabled, false otherwise
    • identityTypeForCustomerEncryptionKey

      IdentityType identityTypeForCustomerEncryptionKey()
      Type of the Managed Service Identity used to access KeyVault for encryption.

      This property only makes sense when the storage account is encrypted using Customer-managed keys, meaning encryptionKeySource() is StorageAccountEncryptionKeySource.MICROSOFT_KEYVAULT.

      Returns:
      type of the Managed Service Identity used to access KeyVault for encryption, null if encryptionKeySource() is StorageAccountEncryptionKeySource.MICROSOFT_STORAGE
    • userAssignedIdentityIdForCustomerEncryptionKey

      String userAssignedIdentityIdForCustomerEncryptionKey()
      User-assigned Managed Service Identity ID to access the KeyVault for encryption.

      This property only makes sense when the storage account is encrypted using Customer-managed keys, meaning encryptionKeySource() is StorageAccountEncryptionKeySource.MICROSOFT_KEYVAULT and identityTypeForCustomerEncryptionKey() is IdentityType.USER_ASSIGNED.

      Returns:
      user-assigned identity ID used to access KeyVault for encryption, null if encryptionKeySource() is StorageAccountEncryptionKeySource.MICROSOFT_STORAGE or identityTypeForCustomerEncryptionKey() is not IdentityType.USER_ASSIGNED
    • publicNetworkAccess

      PublicNetworkAccess publicNetworkAccess()
      Whether the storage account can be accessed from public network.
      Returns:
      whether the storage account can be accessed from public network.