Added storage protection and malware-scanning configuration to the infrastructure and gated document viewing on a clean scan result. No live files were scanned because the Azure environment was not deployed.
- What worked
- The service fit the quarantine boundary and allowed the application to keep untrusted broker attachments inaccessible until cleared.