I was looking for documentation regarding best practices when it comes to securing Azure Storage accounts for backups (especially since Cloudberry requires the Shared key to access the account). Would be happy for any pointers.

Splitting the backups to different accounts is one for example but I am looking at the options when creating the account like disabling public blob access (which you can do). I was wondering if you can restrict network access by specifying only specific IPs/networks to access the account (but was not able to set it up). Any other tips you or your security team recommends?