
Cloud Scale Analytics with Azure Data Services
By :

While generating your Data Lake Storage account, you must set networking options. You have three options there and, according to your choice, you can implement Azure storage firewalls, virtual networks, and private endpoints with your Data Lake Storage.
Allowing access from all networks will cause the Data Lake Storage to be "visible" to everybody. You won't limit any network addresses, so you will need to secure the data lake with other measures, such as RBAC and ACLs. And don't forget, anybody with a Shared Key or a valid SAS will be able to reach your data lake as well.
You might want to consider setting up firewall rules to limit traffic to your data lake so that only IP ranges and addresses that you know have permission. Let's take a look: