Mar 20, 2026: Block public access to internal stages with IP allowlist exceptions (General availability)¶

You can now block public access to Microsoft Azure internal stages while maintaining an allowlist of IP addresses or CIDR blocks that are permitted to reach the internal stage. The new SYSTEM$BLOCK_INTERNAL_STAGES_PUBLIC_ACCESS_WITH_EXCEPTION function extends the existing set of functions for blocking public access to internal stages by letting you specify exceptions, rather than blocking all public IP addresses.

For more information, see Blocking public access with IP allowlist exceptions and SYSTEM$BLOCK_INTERNAL_STAGES_PUBLIC_ACCESS_WITH_EXCEPTION.