network security for DBFS storage account

[Bas1]

In Azure Databricks the DBFS storage account is open to all networks. Changing that to use a private endpoint or minimizing access to selected networks is not allowed.

Is there any way to add network security to this storage account?

Alternatively, is it possible to configure another storage account for DBFS that is owned, secured and maintained by the customer?

Clarification: This post is intended to be about the DBFS root

[Osirus]

Hello,

for information I've asked Microsoft Support, there's any other security recommandations than those listed in the official documentation:

Recommendations for working with DBFS root - Azure Databricks | Microsoft Learn

Thanks,

Léo

[Odee79]

How can we secure the storage account in the managed resource group which holds the DBFS with restricted network access, since access from all networks is blocked by our Azure storage account policy?