upload/azure: turn off public access on storage accounts

Users might have compliance policies on their azure accounts which
forbid public access on storage accounts.

Author: croissanne

internal/upload/azure/azure.go

@@ -111,7 +111,8 @@ func (ac Client) CreateStorageAccount(ctx context.Context, resourceGroup, name,
 			tag.Name: &tag.Value,
 		},
 		Properties: &armstorage.AccountPropertiesCreateParameters{
-			MinimumTLSVersion: common.ToPtr(armstorage.MinimumTLSVersionTLS12),
+			AllowBlobPublicAccess: common.ToPtr(false),
+			MinimumTLSVersion:     common.ToPtr(armstorage.MinimumTLSVersionTLS12),
 		},
 	}, nil)
 	if err != nil {