Storage account allows trusted Microsoft services access

# Enable trusted Microsoft services on a Storage Account
resource "azurerm_storage_account" "<example_resource_name>" {
  name                     = "<example_resource_name>"
  resource_group_name      = "<example_resource_name>"
  location                 = "<location>"
  account_tier             = "Standard"
  account_replication_type = "LRS"

  network_rules {
    bypass = ["AzureServices"] # CRITICAL: Allows trusted Microsoft services to bypass network rules
  }
}

// Enable trusted Microsoft services on a Storage Account
resource stg 'Microsoft.Storage/storageAccounts@2023-01-01' = {
  name: '<example_resource_name>'
  location: '<location>'
  kind: 'StorageV2'
  sku: { name: 'Standard_LRS' }
  properties: {
    networkAcls: {
      bypass: 'AzureServices' // CRITICAL: Allows trusted Microsoft services to bypass network rules
    }
  }
}