resource "azurerm_storage_sync" "test" {
                            ...
+             incoming_traffic_policy = AllowVirtualNetworksOnly
            }