ARM模板在ADO流水线创建ADLS存储遇Azure策略违规问题

我通过ARM模板在ADO流水线中创建ADLS存储时部署失败，但手动创建可以成功。环境存在存储创建限制策略，错误提示要求禁用存储公网访问，我已经在模板中添加了相关配置，但仍不清楚失败原因。

相关文件 #

storage.json #

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "storageAccountName": {
            "type": "string"
        },
        "containerName": {
            "type": "string"
        },
        "location": {
            "type": "string",
            "defaultValue": "westus2"
        },
        "resourceGroupName": {
            "type": "string"
        }
    },
    "resources": [
        {
            "type": "Microsoft.Storage/storageAccounts",
            "apiVersion": "2021-09-01",
            "name": "[parameters('storageAccountName')]",
            "location": "[parameters('location')]",
            "kind": "StorageV2",
            "sku": {
                "name": "Standard_LRS"
            },
            "properties": {
                "accessTier": "Hot",
                "publicNetworkAccess": "Disabled",
                "isHnsEnabled": true
            }
        },
        {
            "type": "Microsoft.Storage/storageAccounts/blobServices/containers",
            "apiVersion": "2021-04-01",
            "name": "[concat(parameters('storageAccountName'), '/default/', parameters('containerName'))]",
            "dependsOn": [
                "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccountName'))]"
            ],
            "properties": {
                "publicAccess": "None"
            }
        }
    ]
}

parameters.json #

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "storageAccountName": {
            "value": "adlscrscrs"
        },
        "containerName": {
            "value": "test"
        },
        "location": {
            "value": "eastus"
        },
        "resourceGroupName": {
            "value": "**"
        }
    }
}

部署错误日志 #

部署出现错误。错误代码：InvalidTemplateDeployment。
2025-03-05T16:21:23.9969916Z ##[error]模板部署因策略违规失败。请查看详情了解更多信息。
2025-03-05T16:21:23.9983670Z ##[error]详情：
2025-03-05T16:21:23.9985377Z ##[error]资源'adlscrscrs'被策略阻止。错误类型：PolicyViolation，策略定义名称：Blob public network access should be disabled for the Storage Account，策略分配名称：**。
2025-03-05T16:21:23.9988639Z ##[error][Azure门户查看更多信息]
2025-03-05T16:21:23.9990493Z ##[warning]在Azure资源管理器模板中发现验证错误。这可能导致模板部署失败。任务在创建或更新模板部署时失败。请遵循相关文档。

内容的提问来源于stack exchange，提问作者Salman