Storage accounts are set to private access only.
Storage accounts are encrypted (new clusters only). Existing clusters need to be re-created.
Storage accounts are created with general-purpose v2 for new clusters.
General-purpose v2 storage accounts support the latest Azure Storage features and incorporate all the functionality of general-purpose v1 and Blob storage accounts.
Storage accounts access is limited with firewall rules via Azure network security groups (NSGs), which filter network traffic to and from your storage accounts. For more information, see Azure network security groups overview.
Transport Layer Security (TLS) protocol version 1.2 provides secure communications, data privacy, and data integrity.