CmdID

CmdID / az / az storage / az storage account

az storage account create

Create a storage account. Azure CLI reference

74 options Its page in the Azure CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

74 in the Azure CLI reference
Show its 74 options
--account-typeThe storage account type
--actionThe action of virtual network rule.
--allow-blob-access-points, --allow-access-pointsAllow Blob Access Point configurations to be created or managed on the storage account.
--allow-blob-public-accessAllow or disallow public access to all blobs or containers in the storage account.
--allow-cross-tenant-delegation-sas, --cross-tenant-sasAllow or disallow cross-tenant user delegation SAS.
--allow-cross-tenant-replication, -rAllow or disallow cross AAD tenant object replication.
--allow-protected-append-writes, --allow-append, -wThis property can only be changed for disabled and unlocked time-based retention policies.
--allow-shared-key-access, -kIndicate whether the storage account permits requests to be authorized with the account access key via Shared Key.
--allow-shared-key-access-for-blob, --blob-shared-keyAllow or disallow Shared Key authorization for the blob service.
--allow-shared-key-access-for-file, --file-shared-keyAllow or disallow Shared Key authorization for the file service.
--allow-shared-key-access-for-queue, --queue-shared-keyAllow or disallow Shared Key authorization for the queue service.
--allow-shared-key-access-for-table, --table-shared-keyAllow or disallow Shared Key authorization for the table service.
--allowed-copy-scopeRestrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
--azure-storage-sidSpecify the security identifier (SID) for Azure Storage.
--bypassBypass traffic for space-separated uses.
--custom-domainUser domain assigned to the storage account.
--default-actionDefault action to apply when no rule matches.
--default-share-permission, -dDefault share permission for users using Kerberos authentication if RBAC role is not assigned.
--dns-endpoint-type, --endpointAllow you to specify the type of endpoint.
--domain-guidSpecify the domain GUID.
--domain-nameSpecify the primary domain that the AD DNS server is authoritative for.
--domain-sidSpecify the security identifier (SID).
--edge-zoneThe name of edge zone.
--enable-alwThe account level immutability property.
--enable-blob-geo-priority-replication, --blob-geo-slaIndicates whether Blob Geo Priority Replication is enabled for the storage account.
--enable-extended-groupsEnable extended group support with local users feature, if set to true.
--enable-files-aaddsEnable Azure Active Directory Domain Services authentication for Azure Files
--enable-files-aadkerbEnable Azure Files Active Directory Domain Service Kerberos Authentication for the storage account
--enable-files-addsEnable Azure Files Active Directory Domain Service Authentication for storage account.
--enable-hierarchical-namespace, --hnsAllow the blob service to exhibit filesystem semantics.
--enable-large-file-shareEnable the capability to support large file shares with more than 5 TiB capacity for storage account.Once the property is enabled, the feature cannot be disabled.
--enable-local-userEnable local user features.
--enable-nfs-v3NFS 3.0 protocol support enabled if sets to true.
--enable-sftpEnable Secure File Transfer Protocol.
--enable-smb-oauthSpecifies if managed identities can access SMB shares using OAuth.
--encryption-key-nameThe name of the KeyVault key.
--encryption-key-sourceThe default encryption key source
--encryption-key-type-for-queue, -qSet the encryption key type for Queue service.
--encryption-key-type-for-table, -tSet the encryption key type for Table service.
--encryption-key-vaultThe Uri of the KeyVault.
--encryption-key-versionThe version of the KeyVault key to use, which will opt out of implicit key rotation.
--forest-nameSpecify the Active Directory forest to get.
--https-onlyAllow https traffic only to storage service if set to true.
--identity-typeThe identity type.
--immutability-period-in-days, --immutability-periodThe immutability period for the blobs in the container since the policy creation, in days.
--immutability-stateDefines the mode of the policy.
--key-expiration-period-in-days, --key-exp-daysExpiration period in days of the Key Policy assigned to the storage account
--key-vault-federated-client-id, -fClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
--key-vault-user-identity-id, -uResource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
--kindIndicate the type of storage account.
--location, -lLocation.
--min-tls-versionThe minimum TLS version to be permitted on requests to storage.
--name, -nThe storage account name.
--net-bios-domain-nameSpecify the NetBIOS domain name.
--public-network-accessEnable or disable public network access to the storage account.
--publish-internet-endpointsA boolean flag which indicates whether internet routing storage endpoints are to be published.
--publish-ipv6-endpointA boolean flag which indicates whether IPv6 storage endpoints are to be published.
--publish-microsoft-endpointsA boolean flag which indicates whether microsoft routing storage endpoints are to be published.
--require-infrastructure-encryption, -iA boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
--require-user-bound-user-delegation-sas, --user-bound-sasRequire user delegation SAS tokens to be bound to a specific user.
--require-user-bound-user-delegation-sas-action, --user-bound-actionThe action to perform when a user delegation SAS token is not bound to a user as required.
--routing-choiceRouting Choice defines the kind of network routing opted by the user.
--sam-account-nameSpecify the Active Directory SAMAccountName for Azure Storage.
--sas-expiration-action, --sas-exp-actionThe action to be performed when --sas-expiration-period is violated.
--sas-expiration-period, --sas-expExpiration period of the SAS Policy assigned to the storage account, DD.HH:MM:SS.
--skuThe storage account SKU.
--subnetName or ID of subnet.
--tagsspace-separated tags: key[=value] [key[=value] ...].
--turbo-tier-statusEnable or disable Turbo Tier.
--turbo-tier-target-percent, --turbo-tier-targetTarget fill percentage for Turbo Tier, from 10 to 100.
--user-identity-idThe key is the ARM resource identifier of the identity.
--vnet-nameName of a virtual network.
--zone-placement-policyThe availability zone pinning policy for the storage account.
--zonesDescribes the available zones for the product where storage account resource can be created.