Views:
File Security Storage provides easy deployment using the Cloud Account Management Terraform template to integrate automated scanning of files as you upload them into your storage and effortlessly detect all types of malware including viruses, trojans, spyware, and more. Currently, File Security Storage only supports single subscription accounts.

Verify the service quota Parent topic

File Security Storage deploys Azure Functions using an EP1 (Elastic Premium 1) service plan by default. App Service Plans often have restrictive default quotas that you need to configure before deployment. You only need to configure the quota in the template deployment region, as Azure Function resources are created only there and the quota applies to Azure Functions. This single service plan is shared by all three function apps: Scanner, Post-Scan Action, and Event Forwarder.
You must verify and, if necessary, request a quota increase for the Apps Service Plans (EP1 or Premium V3) in your deployment region.

Procedure

  1. Navigate to Azure Portal → Subscriptions → Usage + quotas.
  2. Filter by your deployment region.
  3. Search the following terms:
    • App Service Plan
    • Premium V3
    • Elastic Premium
  4. Check the current quota vs. usage.
  5. Request a quota increase if needed.
    Note
    Note
    This is usually approved within 24-48 hours.

Deploy the Terraform template Parent topic

Procedure

  1. Go to Cloud Storage → File Security
  2. On the Inventory page, under Storage, select Azure.
  3. Click Add Single Subscription to protect containers.
  4. Select Single Subscription.
  5. On the General information page, select:
    • the region in which you are deploying the Terraform template.
      Note
      Note
      Currently, scanners can only be created in one region, which is pre-selected.
    • the Server & Workload Protection Manager.
  6. Click Next.
  7. On the Features and Permissions page, enable File Security Storage.
  8. Open your Azure console in a new tab.
  9. Set the stack parameters:
    1. In Azure Cloud Shell create your deployment folder.
    2. Upload the stack template zip file to your cloud environment.
    3. Extract the files from the zip file.
    4. Change the directory to the deployment folder.
    5. Run the Terraform deployment script.
      When the script successfully deploys the stack, the subscription appears under Azure on the Inventory page.
  10. Click Done.

Next steps

Now you need to enable the scanner for the storage accounts in each region that you enabled in your template