diff --git a/Deployment/azuredeploy.json b/Deployment/azuredeploy.json
index b57657ec3..94a7236af 100644
--- a/Deployment/azuredeploy.json
+++ b/Deployment/azuredeploy.json
@@ -1,5 +1,5 @@
 {
-  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
+  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
   "contentVersion": "1.0.0.0",
   "parameters": {
     "baseResourceName": {
@@ -191,7 +191,7 @@
     {
       "type": "Microsoft.Storage/storageAccounts",
       "name": "[variables('storageAccountName')]",
-      "apiVersion": "2018-02-01",
+      "apiVersion": "2019-06-01",
       "location": "[parameters('location')]",
       "kind": "Storage",
       "properties": {
diff --git a/Source/Microsoft.Teams.Apps.CompanyCommunicator.Prep.Func/Export/Activities/UploadActivity.cs b/Source/Microsoft.Teams.Apps.CompanyCommunicator.Prep.Func/Export/Activities/UploadActivity.cs
index b4c53d91d..388faddd8 100644
--- a/Source/Microsoft.Teams.Apps.CompanyCommunicator.Prep.Func/Export/Activities/UploadActivity.cs
+++ b/Source/Microsoft.Teams.Apps.CompanyCommunicator.Prep.Func/Export/Activities/UploadActivity.cs
@@ -89,10 +89,10 @@ public async Task UploadActivityAsync(
             CloudBlobContainer container = client.GetContainerReference(Common.Constants.BlobContainerName);
             await container.CreateIfNotExistsAsync();
 
-            // Set the permissions so the blobs are public.
+            // Set the permissions so the blobs are private.
             BlobContainerPermissions permissions = new BlobContainerPermissions
             {
-                PublicAccess = BlobContainerPublicAccessType.Blob,
+                PublicAccess = BlobContainerPublicAccessType.Off,
             };
             await container.SetPermissionsAsync(permissions);
             CloudBlockBlob blob = container.GetBlockBlobReference(uploadData.fileName);