Open your Storage Account:
# turn public access off:
az storage account update -g labs-<your-name>-storage-RG -n <your-name>storage --default-action Deny
# find your public IP address (or browse to https://www.whatsmyip.org)
curl ifconfig.me
# check existing rules
az storage account network-rule list -g labs-<your-name>-storage-RG --account-name <your-name>storage
# add a rule to allow your IP address:
az storage account network-rule add -g labs-<your-name>-storage-RG --account-name <your-name>storage --ip-address 213.18.157.115 #<public-ip-address>
From your own machine:
curl -o download4.txt https://<your-name>storage.blob.core.windows.net/drops/document.txt
cat download4.txt
You should see the document text, not an XML error string