{"id":58745,"date":"2026-09-01T20:02:59","date_gmt":"2026-09-01T10:02:59","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/"},"modified":"2026-09-01T20:04:23","modified_gmt":"2026-09-01T10:04:23","slug":"azure-container-apps-nfs-mounts-security-checks-before-go-live","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/","title":{"rendered":"Azure Container Apps NFS Mounts Security Checks Before Go-Live"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post Azure Container Apps NFS Mounts Security Checks Before Go-Live we will explain how NFS storage works, where the main risks sit, and what your team should verify before production traffic arrives.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">The common problem is not getting the storage mount working. It is confirming that the mount remains secure, available and visible when the application scales, restarts or encounters a network problem.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is an NFS mount in Azure Container Apps?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Container Apps runs containerised applications without requiring your team to manage servers or a Kubernetes cluster. Containers are designed to be replaceable, so files saved inside a container can disappear when it restarts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An NFS mount solves this by connecting the container to a persistent Azure Files share. NFS, or Network File System, allows Linux applications to access remote storage as though it were a local folder.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is useful for AI models, shared documents, application output and workloads that need multiple replicas to access the same files. It also creates a direct path between your application and persistent business data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That path needs more attention than a normal application folder. A broad or poorly monitored mount can expose information to the wrong service, allow accidental deletion or leave an application unavailable without a useful alert.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Confirm exactly what the application needs to access<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Start with the business requirement, not the storage account. Identify which files the application must read, which files it must change and how long those files need to remain available.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A reporting service that only reads approved documents should not receive write access. An AI agent processing invoices should not automatically gain access to every finance, payroll and customer folder stored on the same share.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use separate shares or tightly controlled directories for different workloads. Configure the Container Apps environment storage definition as read-only whenever the application does not need to create, change or delete files.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This follows the same principle covered in our guide to scoped storage mounts for enterprise AI data security. Smaller access boundaries reduce the amount of damage a compromised or faulty application can cause.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Treat the network as part of the security boundary<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NFS access relies heavily on network controls. Unlike services that authenticate every request through Microsoft Entra ID, NFS file shares generally trust connections coming from approved networks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before go-live, confirm that the Container Apps environment uses the intended virtual network and that the Azure Files share is reached through a private endpoint or another explicitly restricted network path. A private endpoint gives the storage service a private address inside your Azure network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Creating a private endpoint is not enough by itself. Check that public network access is disabled where possible and that private DNS resolves the storage hostname to the private address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Test both sides of the rule. The application should connect from its approved network, while a test system outside that network should be denied.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Allow only the subnets that genuinely require storage access.<\/li>\n<li>Review network security groups and firewall rules for unnecessary paths.<\/li>\n<li>Confirm DNS resolution from the running Container Apps environment.<\/li>\n<li>Document any public access exception, including its owner and expiry date.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Defender for Cloud and Wiz can identify many public exposure and configuration risks. However, automated findings should support rather than replace a real connectivity test.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Test Linux permissions using the real container identity<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A successful mount does not prove that file permissions are safe. NFS uses Linux user and group identifiers, known as UID and GID values, to decide what a process can do.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Run the application as a non-root user wherever possible. Root is the most powerful Linux account, and allowing a public-facing application to run as root increases the impact of a container compromise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Files also supports root squash, which converts root access from a connecting client into a less-privileged identity. Consider enabling it unless your application has a tested and documented reason to require root-level file access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Avoid solving permission errors with broad settings such as allowing every user to read, write and execute everything. That may make testing pass, but it removes an important security boundary.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Your pre-production test should use the same container image, UID, GID and mount configuration planned for production. Verify whether the application can read, create, rename and delete files, then confirm that prohibited actions fail.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4. Verify encryption and protect deployment secrets<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Files encrypts stored data, but your review should also cover data moving between Container Apps and the NFS share. Azure Files supports encryption in transit for NFS through a secure client-side mounting process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Do not assume that enabling an encryption setting automatically makes every managed container mount compatible. Validate support for your Container Apps environment, Azure Files configuration, region and deployment method before enforcing the setting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the selected mount method cannot use NFS encryption in transit, keep the connection on a tightly restricted private network and record the risk decision. For sensitive personal, financial or regulated information, consider whether another storage pattern would provide stronger authentication and encryption controls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Deployment files should not contain storage credentials, API keys or other application secrets in plain text. Use managed identities where the connected service supports them, and store remaining secrets in Azure Key Vault with restricted administrative access.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Monitor the mount from both ends<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A dashboard showing that the container is running does not prove that it can use the file share. You need visibility from Azure Container Apps, the application and Azure Files.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Container Apps system logs record successful and failed volume mount events. Application logs should separately record storage timeouts, permission failures and file operation errors without including document contents or sensitive filenames.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For environments using the current Azure Monitor logging destination, the following query provides a useful starting point:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ContainerAppSystemLogs\n| where TimeGenerated &amp;gt; ago(30m)\n| where ContainerAppName == &quot;your-container-app&quot;\n| where Log contains &quot;mount&quot; or Log contains &quot;volume&quot;\n| project TimeGenerated, Type, RevisionName, ReplicaName, Log\n| order by TimeGenerated desc<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Older environments may still write to the ContainerAppSystemLogs_CL table with fields such as Log_s. Review those environments now. Support for the legacy HTTP Data Collector API ends on 14 September 2026, so monitoring migrations should not be left until an incident.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On the Azure Files side, alert on availability, throttled transactions, storage capacity, input\/output utilisation and latency. The difference between end-to-end latency and storage service latency can also help determine whether a slowdown is happening in the application network or within the storage service.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Useful production alerts<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A volume fails to mount on a new revision.<\/li>\n<li>The application records repeated permission or input\/output errors.<\/li>\n<li>File share availability falls below the agreed service target.<\/li>\n<li>Capacity, bandwidth or operation limits approach a defined threshold.<\/li>\n<li>Storage latency remains above the normal baseline.<\/li>\n<li>No expected file activity occurs during a critical processing window.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">6. Test scaling, failure and recovery before launch<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Mount problems often appear only when a second replica starts or a new revision is deployed. Test with the same scale and concurrency expected during peak business periods.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Deploy a new revision, direct a small percentage of traffic to it and confirm that every replica can access the correct data. This should form part of the broader production controls described in our guide to production-ready Azure Container Apps workloads.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Temporarily block the storage path in a controlled test environment. Confirm that the application fails safely, does not corrupt partially written files and produces an alert that reaches a named person.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Finally, enable an appropriate combination of soft delete, share snapshots and Azure Backup where supported by your selected Azure Files configuration. Perform a real restore test and record the time required to recover.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical scenario<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 200-person organisation using Container Apps to process customer documents. The initial design mounts one large NFS share with read-write access because it is quicker to configure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The application works during testing, but every replica can modify both incoming documents and archived records. Storage latency is not monitored, and the operations team has no alert for mount failures during a new deployment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before launch, the organisation separates incoming, processing and archive data. The archive becomes read-only, access moves through a private endpoint, the container runs without root privileges, and alerts cover mount errors, capacity and latency.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The business outcome is not simply a cleaner Azure design. It is a smaller data exposure risk, faster incident detection and a tested recovery path if files are deleted or storage becomes unavailable.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Your final go-live decision<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An NFS mount should be treated as a production dependency, not a deployment checkbox. Approval should require evidence that access is limited, networking is private, permissions are tested, logs are searchable, alerts have owners and recovery has been demonstrated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These controls also support the Australian Essential 8, the Australian government&#8217;s cybersecurity framework, particularly its focus on restricting administrative privileges, monitoring systems and maintaining recoverable backups.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudPro Inc brings more than 20 years of enterprise IT experience to Azure, Microsoft 365, Microsoft Defender and Wiz security reviews. As a Melbourne-based Microsoft Partner and Wiz Security Integrator, our focus is practical readiness rather than a generic compliance report.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are unsure whether an Azure Container Apps storage mount is ready for production, we are happy to review the design, permissions and monitoring with your team \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>An NFS mount can quietly become a security and availability risk. Use this practical checklist to protect data, detect failures and avoid production surprises.<\/p>\n","protected":false},"author":1,"featured_media":58747,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_opengraph-title":"NFS Mounts Security Checks Before Go-Live","_yoast_wpseo_opengraph-description":"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.","_yoast_wpseo_twitter-title":"NFS Mounts Security Checks Before Go-Live","_yoast_wpseo_twitter-description":"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[16,19,13,127],"tags":[],"class_list":["post-58745","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-azure","category-azure-security","category-blog","category-cloud-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v28.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>NFS Mounts Security Checks Before Go-Live<\/title>\n<meta name=\"description\" content=\"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NFS Mounts Security Checks Before Go-Live\" \/>\n<meta property=\"og:description\" content=\"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/\" \/>\n<meta property=\"og:site_name\" content=\"CPI Consulting\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-01T10:02:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-01T10:04:23+00:00\" \/>\n<meta name=\"author\" content=\"CPI Staff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"NFS Mounts Security Checks Before Go-Live\" \/>\n<meta name=\"twitter:description\" content=\"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"CPI Staff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/\"},\"author\":{\"name\":\"CPI Staff\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\"},\"headline\":\"Azure Container Apps NFS Mounts Security Checks Before Go-Live\",\"datePublished\":\"2026-09-01T10:02:59+00:00\",\"dateModified\":\"2026-09-01T10:04:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/\"},\"wordCount\":1519,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png\",\"articleSection\":[\"Azure\",\"Azure Security\",\"Blog\",\"Cloud Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/\",\"url\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/\",\"name\":\"NFS Mounts Security Checks Before Go-Live\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png\",\"datePublished\":\"2026-09-01T10:02:59+00:00\",\"dateModified\":\"2026-09-01T10:04:23+00:00\",\"description\":\"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#primaryimage\",\"url\":\"\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png\",\"width\":1536,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/09\\\/01\\\/azure-container-apps-nfs-mounts-security-checks-before-go-live\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cloudproinc.com.au\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure Container Apps NFS Mounts Security Checks Before Go-Live\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#website\",\"url\":\"https:\\\/\\\/cloudproinc.com.au\\\/\",\"name\":\"Cloud Pro Inc - CPI Consulting Pty Ltd\",\"description\":\"Cloud, AI &amp; Cybersecurity Consulting | Melbourne\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudproinc.com.au\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\",\"name\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\",\"url\":\"https:\\\/\\\/cloudproinc.com.au\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"width\":500,\"height\":500,\"caption\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\"},\"image\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\",\"name\":\"CPI Staff\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"caption\":\"CPI Staff\"},\"sameAs\":[\"http:\\\/\\\/www.cloudproinc.com.au\"],\"url\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/author\\\/cpiadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"NFS Mounts Security Checks Before Go-Live","description":"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/","og_locale":"en_US","og_type":"article","og_title":"NFS Mounts Security Checks Before Go-Live","og_description":"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.","og_url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/","og_site_name":"CPI Consulting","article_published_time":"2026-09-01T10:02:59+00:00","article_modified_time":"2026-09-01T10:04:23+00:00","author":"CPI Staff","twitter_card":"summary_large_image","twitter_title":"NFS Mounts Security Checks Before Go-Live","twitter_description":"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.","twitter_misc":{"Written by":"CPI Staff","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#article","isPartOf":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/"},"author":{"name":"CPI Staff","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e"},"headline":"Azure Container Apps NFS Mounts Security Checks Before Go-Live","datePublished":"2026-09-01T10:02:59+00:00","dateModified":"2026-09-01T10:04:23+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/"},"wordCount":1519,"commentCount":0,"publisher":{"@id":"https:\/\/cloudproinc.com.au\/#organization"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/09\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png","articleSection":["Azure","Azure Security","Blog","Cloud Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/","url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/","name":"NFS Mounts Security Checks Before Go-Live","isPartOf":{"@id":"https:\/\/cloudproinc.com.au\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/09\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png","datePublished":"2026-09-01T10:02:59+00:00","dateModified":"2026-09-01T10:04:23+00:00","description":"Review NFS mounts before go-live with practical checks for access scope, private networking, Linux permissions, encryption, secrets and reliable monitoring.","breadcrumb":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#primaryimage","url":"\/wp-content\/uploads\/2026\/09\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png","contentUrl":"\/wp-content\/uploads\/2026\/09\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png","width":1536,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/01\/azure-container-apps-nfs-mounts-security-checks-before-go-live\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cloudproinc.com.au\/"},{"@type":"ListItem","position":2,"name":"Azure Container Apps NFS Mounts Security Checks Before Go-Live"}]},{"@type":"WebSite","@id":"https:\/\/cloudproinc.com.au\/#website","url":"https:\/\/cloudproinc.com.au\/","name":"Cloud Pro Inc - CPI Consulting Pty Ltd","description":"Cloud, AI &amp; Cybersecurity Consulting | Melbourne","publisher":{"@id":"https:\/\/cloudproinc.com.au\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudproinc.com.au\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cloudproinc.com.au\/#organization","name":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd","url":"https:\/\/cloudproinc.com.au\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/logo\/image\/","url":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","contentUrl":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","width":500,"height":500,"caption":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd"},"image":{"@id":"https:\/\/cloudproinc.com.au\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e","name":"CPI Staff","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","caption":"CPI Staff"},"sameAs":["http:\/\/www.cloudproinc.com.au"],"url":"https:\/\/www.cloudproinc.com.au\/index.php\/author\/cpiadmin\/"}]}},"jetpack-related-posts":[{"id":53744,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2025\/08\/31\/extracting-structured-data-with-openai\/","url_meta":{"origin":58745,"position":0},"title":"Extracting Structured Data with OpenAI","author":"CPI Staff","date":"August 31, 2025","format":false,"excerpt":"Turn messy text into clean JSON using OpenAI. Learn schema design, prompting, validation, and code patterns for reliable extraction at scale.","rel":"","context":"In &quot;AI&quot;","block_context":{"text":"AI","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2025\/08\/extracting-structured-data-with-openai.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2025\/08\/extracting-structured-data-with-openai.png 1x, \/wp-content\/uploads\/2025\/08\/extracting-structured-data-with-openai.png 1.5x, \/wp-content\/uploads\/2025\/08\/extracting-structured-data-with-openai.png 2x, \/wp-content\/uploads\/2025\/08\/extracting-structured-data-with-openai.png 3x, \/wp-content\/uploads\/2025\/08\/extracting-structured-data-with-openai.png 4x"},"classes":[]},{"id":58491,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/17\/a-practical-azure-front-door-mutual-tls-playbook-for-b2b-apis\/","url_meta":{"origin":58745,"position":1},"title":"A Practical Azure Front Door Mutual TLS Playbook for B2B APIs","author":"CPI Staff","date":"August 17, 2026","format":false,"excerpt":"Learn how Azure Front Door mutual TLS can block unknown systems, strengthen partner API security, and reduce the operational risk of certificate-based B2B integrations.","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/a-practical-azure-front-door-mutual-tls-playbook-for-b2b-apis.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/a-practical-azure-front-door-mutual-tls-playbook-for-b2b-apis.png 1x, \/wp-content\/uploads\/2026\/08\/a-practical-azure-front-door-mutual-tls-playbook-for-b2b-apis.png 1.5x, \/wp-content\/uploads\/2026\/08\/a-practical-azure-front-door-mutual-tls-playbook-for-b2b-apis.png 2x, \/wp-content\/uploads\/2026\/08\/a-practical-azure-front-door-mutual-tls-playbook-for-b2b-apis.png 3x, \/wp-content\/uploads\/2026\/08\/a-practical-azure-front-door-mutual-tls-playbook-for-b2b-apis.png 4x"},"classes":[]},{"id":53832,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2025\/09\/15\/manage-android-byod-with-microsoft-intune\/","url_meta":{"origin":58745,"position":2},"title":"Manage Android BYOD with Microsoft Intune","author":"CPI Staff","date":"September 15, 2025","format":false,"excerpt":"A practical guide to securing personal Android devices with Intune work profiles, app protection, and Conditional Access\u2014without invading employee privacy.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 1x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 1.5x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 2x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 3x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 4x"},"classes":[]},{"id":57049,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/02\/18\/what-essential-8-compliance-actually-means-for-your-business\/","url_meta":{"origin":58745,"position":3},"title":"What Essential 8 Compliance Actually Means for Your Business","author":"CPI Staff","date":"February 18, 2026","format":false,"excerpt":"Essential 8 isn\u2019t a checkbox. It\u2019s a practical way to reduce ransomware risk, prove due diligence, and avoid expensive security \u201csurprises\u201d as your business grows.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/02\/post-27.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/02\/post-27.png 1x, \/wp-content\/uploads\/2026\/02\/post-27.png 1.5x, \/wp-content\/uploads\/2026\/02\/post-27.png 2x, \/wp-content\/uploads\/2026\/02\/post-27.png 3x, \/wp-content\/uploads\/2026\/02\/post-27.png 4x"},"classes":[]},{"id":57695,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/06\/28\/conditional-access-gaps-that-put-business-accounts-at-risk-today\/","url_meta":{"origin":58745,"position":4},"title":"Conditional Access Gaps That Put Business Accounts at Risk Today","author":"CPI Staff","date":"June 28, 2026","format":false,"excerpt":"Conditional Access can stop account attacks before they become breaches, but only if it is designed, tested, and maintained properly.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/06\/conditional-access-gaps-that-put-business-accounts-at-risk-today.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/06\/conditional-access-gaps-that-put-business-accounts-at-risk-today.png 1x, \/wp-content\/uploads\/2026\/06\/conditional-access-gaps-that-put-business-accounts-at-risk-today.png 1.5x, \/wp-content\/uploads\/2026\/06\/conditional-access-gaps-that-put-business-accounts-at-risk-today.png 2x, \/wp-content\/uploads\/2026\/06\/conditional-access-gaps-that-put-business-accounts-at-risk-today.png 3x, \/wp-content\/uploads\/2026\/06\/conditional-access-gaps-that-put-business-accounts-at-risk-today.png 4x"},"classes":[]},{"id":53812,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2025\/09\/14\/mastering-docker-environment-variables-with-docker\/","url_meta":{"origin":58745,"position":5},"title":"Mastering Docker environment variables with Docker","author":"CPI Staff","date":"September 14, 2025","format":false,"excerpt":"Learn how to manage configuration with Docker and Compose using environment variables, from build-time and runtime to .env files, secrets, precedence, and pitfalls. Practical steps and examples included.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2025\/09\/mastering-docker-environment-variables-with-docker-compose-today.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2025\/09\/mastering-docker-environment-variables-with-docker-compose-today.png 1x, \/wp-content\/uploads\/2025\/09\/mastering-docker-environment-variables-with-docker-compose-today.png 1.5x, \/wp-content\/uploads\/2025\/09\/mastering-docker-environment-variables-with-docker-compose-today.png 2x, \/wp-content\/uploads\/2025\/09\/mastering-docker-environment-variables-with-docker-compose-today.png 3x, \/wp-content\/uploads\/2025\/09\/mastering-docker-environment-variables-with-docker-compose-today.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/09\/azure-container-apps-nfs-mounts-security-checks-before-go-live.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/58745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=58745"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/58745\/revisions"}],"predecessor-version":[{"id":58746,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/58745\/revisions\/58746"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/58747"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=58745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=58745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=58745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}