diff --git a/src/modules/storage_account/storage_account.tf b/src/modules/storage_account/storage_account.tf
index 0babdd8e..b8d585f2 100644
--- a/src/modules/storage_account/storage_account.tf
+++ b/src/modules/storage_account/storage_account.tf
@@ -7,6 +7,7 @@ resource "azurerm_storage_account" "main" {
   account_kind             = try(var.settings.account_kind, "StorageV2")
   account_tier             = try(var.settings.account_tier, "Standard")
   account_replication_type = var.settings.account_replication_type
+  public_network_access_enabled = try(var.settings.public_network_access_enabled, null)
 
   allow_nested_items_to_be_public   = try(var.settings.allow_nested_items_to_be_public, null)
   cross_tenant_replication_enabled  = try(var.settings.cross_tenant_replication_enabled, null)
diff --git a/src/modules/virtual_machines/linux_virtual_machine/linux_virtual_machine.tf b/src/modules/virtual_machines/linux_virtual_machine/linux_virtual_machine.tf
index 51afa6d1..e6240967 100644
--- a/src/modules/virtual_machines/linux_virtual_machine/linux_virtual_machine.tf
+++ b/src/modules/virtual_machines/linux_virtual_machine/linux_virtual_machine.tf
@@ -43,12 +43,14 @@ resource "azurerm_linux_virtual_machine" "main" {
     disk_encryption_set_id    = can(var.settings.os_disk.disk_encryption_set_key) ? var.resources.disk_encryption_sets[var.settings.os_disk.disk_encryption_set_key].id : null
   }
 
-
-  source_image_reference {
-    publisher = var.settings.source_image_reference.publisher
-    offer     = var.settings.source_image_reference.offer
-    sku       = var.settings.source_image_reference.sku
-    version   = var.settings.source_image_reference.version
+  dynamic "source_image_reference" {
+    for_each = can(var.settings.source_image_reference) ? [1] : []
+    content {
+      publisher = var.settings.source_image_reference.publisher
+      offer     = var.settings.source_image_reference.offer
+      sku       = var.settings.source_image_reference.sku
+      version   = var.settings.source_image_reference.version
+    }
   }
   timeouts {
     create = "60m"