[RULE] Disable local auth for storage accounts

[BernieWhite]

Existing rule

No response

Suggested rule

Storage accounts allow disabling local accounts which disables both access keys and SAS tokens.

This is configured by setting the allowSharedKeyAccess property to false.

Access keys allow depersonalized access to a Storage Account using a shared secret.

Pillar

None

Additional context

Similar rules: https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Cosmos.DisableLocalAuth/

• https://learn.microsoft.com/en-gb/azure/storage/common/shared-key-authorization-prevent