diff --git a/Deployment/bicep/azurestorageaccount.bicep b/Deployment/bicep/azurestorageaccount.bicep
index 2320d2f2..eebc8023 100644
--- a/Deployment/bicep/azurestorageaccount.bicep
+++ b/Deployment/bicep/azurestorageaccount.bicep
@@ -10,6 +10,13 @@ param skuName string = 'Standard_LRS'
 @description('The kind of the storage account')
 param kind string = 'StorageV2'
 
+@allowed([
+  'TLS1_2'
+  'TLS1_3'
+])
+@description('Optional. Set the minimum TLS version on request to storage. The TLS versions 1.0 and 1.1 are deprecated and not supported anymore.')
+param minimumTlsVersion string = 'TLS1_2'
+
 resource storageAccount 'Microsoft.Storage/storageAccounts@2021-04-01' = {
   name: storageAccountName
   location: location
@@ -19,6 +26,7 @@ resource storageAccount 'Microsoft.Storage/storageAccounts@2021-04-01' = {
   kind: kind
   properties: {
     accessTier: 'Hot'
+    minimumTlsVersion: minimumTlsVersion
   }
 }