Controlling Access to Azure Storage
Anonymous as access control
...
Identity Based Access - Azure Files with Azure AD DS as access control
...
Protecting Data in Azure Storage
Storage Encryption
...
Customer-Managed Encryption Keys
SSE with Microsoft Managed Keys (Account Encryption Key) could be extended with a Customer-Managed Key stored in a Key Vault.
Azure Disk Encryption
Immutable Storage