Controlling Access to Azure Storage
Anonymous as access control
...
Identity Based Access - Azure Files with Azure AD DS as access control
...
Protecting Data in Azure Storage
Storage Encryption
...
Customer-Managed Encryption Keys
...
Supports both Virtual Machines and instances of a Virtual Machine Scale Set.
A VM Extension configures OS encryption (e.g Linux or Windows).
Only the VM can access the encryption key/secret in Key Vault
Immutable Storage
Immutable can be configured with 2 types of policies.