---
type: resource-type
title: StorageAccount
description: azure resource type Microsoft.Storage/storageAccounts
name: StorageAccount
lexicon: azure
resource_type: Microsoft.Storage/storageAccounts
---
`Microsoft.Storage/storageAccounts`, a resource type of the azure lexicon.

## Properties

- `name` (`string`, required): The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- `extendedLocation` (`StorageAccount_ExtendedLocation`, optional): Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location
- `identity` (`StorageAccount_Identity`, optional): The identity of the resource.
- `kind` (`"BlobStorage" | "BlockBlobStorage" | "FileStorage" | "Storage" | "StorageV2"`, optional): Required. Indicates the type of storage account.
- `location` (`string`, optional): Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
- `placement` (`StorageAccount_Placement`, optional): Optional. Gets or sets the zonal placement details for the storage account.
- `properties` (`StorageAccount_StorageAccountPropertiesCreateParameters`, optional): The parameters used to create the storage account.
- `resources` (`any[]`, optional)
- `sku` (`StorageAccount_Sku`, optional): Required. Gets or sets the SKU name.
- `tags` (`Record<string, unknown>`, optional): Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
- `zones` (`string[]`, optional): Optional. Gets or sets the pinned logical availability zone for the storage account.

## Attributes

- `id`
- `primaryEndpoints`
- `primaryLocation`
- `provisioningState`

## Governed by

- [AZR002](/rules/AZR002.md): Storage Account HTTPS Only
- [AZR014](/rules/AZR014.md): Public blob access enabled on storage account — disable allowBlobPublicAccess to prevent public data exposure
- [AZR015](/rules/AZR015.md): Missing encryption on storage account — enable encryption services to protect data at rest