It’s a good approach to lock down a resource when you’re trying to secure it, and then gradually add the permissions you need.
In this case it’s the networking of the Storage Account, and we did something similar in the Storage Account lab.
Need more? Here’s the solution.