A public access level controls whether a storage container and its blobs can be reached anonymously. Choose it when creating a container, and treat the choice as a security decision rather than a decorative dropdown. section 2.2.7
Azure provides three access levels:
- Private or Off allows access only to the storage account owner or authenticated callers. section 2.2.7 section 5.3.2
- Blob allows anonymous access to individual blobs through their direct addresses, but not to container data. section 2.2.7 section 5.3.2
- Container allows anonymous read access to the container and all blobs inside it. section 2.2.7 section 5.3.2
Choosing an image-output setting
An image-resizing workflow can use Blob access for an output container so resized images are reachable without exposing container listings. A private collection of books should use Off instead. Choosing Container for convenience could expose every blob to the public internet. section 2.2.15 section 5.3.2
