diff --git a/pkg/cloudprovider/providers/azure/azure_blob.go b/pkg/cloudprovider/providers/azure/azure_blob.go
index 5cca3bd7761..47d1edd130f 100644
--- a/pkg/cloudprovider/providers/azure/azure_blob.go
+++ b/pkg/cloudprovider/providers/azure/azure_blob.go
@@ -45,7 +45,7 @@ func (az *Cloud) createVhdBlob(accountName, accountKey, name string, sizeGB int6
 		// if container doesn't exist, create one and retry PutPageBlob
 		detail := err.Error()
 		if strings.Contains(detail, errContainerNotFound) {
-			err = blobClient.CreateContainer(vhdContainerName, azs.ContainerAccessTypeContainer)
+			err = blobClient.CreateContainer(vhdContainerName, azs.ContainerAccessTypePrivate)
 			if err == nil {
 				err = blobClient.PutPageBlob(vhdContainerName, name, vhdSize, tags)
 			}