- Ensure 'Allowed Protocols' for Shared Access Signature (SAS) Tokens Are Restricted to HTTPS Only for Secrets and Keys
- Ensure that shared access signature (SAS) tokens expire within an hour for Secrets and Keys
- Ensure stored access policies (SAP) are used when generating shared access signature (SAS) tokens
- Ensure Critical Data is Encrypted with Microsoft Managed Keys (MMK)
- Ensure 'Versioning' is set to 'Enabled' on Azure Blob Storage storage accounts