Lab 07 - Manage Azure Storage

An Azure storage account contains all your Azure Storage data objects: blobs, files, queues, and tables. The storage account provides a unique namespace for your Azure Storage data that is accessible from anywhere in the world over HTTP or HTTPS.

Azure storage provides several redundancy models including Locally redundant storage (LRS), Zone-redundant storage (ZRS), and Geo-redundant storage (GRS).

Azure blob storage allows you to store large amounts of unstructured data on Microsoft's data storage platform. Blob stands for Binary Large Object, which includes objects such as images and multimedia files.

Azure file Storage provides shared storage for structured data. The data can be organized in folders.

Immutable storage provides the capability to store data in a write once, read many (WORM) state. Immutable storage policies can be time-based or legal-hold.

Task 1: Create and configure a storage account.

Performance Tips:

You should use the Standard performance tier for most applications. Use the Premium performance tier for enterprise or high-performance applications.

On the Advanced tab, use the informational icons to learn more about the choices. Take the defaults.

On the Networking tab, review the available options, select Disable public access and use private access.

Review the Data protection tab. Notice 7 days is the default soft delete retention policy. 

Note you can enable blob versioning. Accept the defaults.

Review the Encryption tab. Notice the additional security options. Accept the defaults.

Review the Overview blade and the additional configurations that can be changed. These are global settings for the storage account. Notice the storage account can be used for Blob containers, File shares, Queues, and Tables.

Task 2: Create and configure secure blob storage

Return to the containers page, select your data container and then click Upload.

https://samuel0329.blob.core.windows.net/data/securitytest/file1.txt?sp=r&st=2025-03-29T02:27:02Z&se=2025-03-29T10:27:02Z&spr=https&sv=2024-11-04&sr=b&sig=Xy9DlIQ0b6bhDXr%2F9PsVYx41dAaqsrU3mUrUBQxDI0E%3D

Task 3: Create and configure an Azure File storage

Restrict network access to the storage account

In the Security + networking section, select the Networking blade.

Select add existing virtual network and select vnet1 and default subnet, select Add.

Delete your machine IP address. Allowed traffic should only come from the virtual network.

Note: The storage account should now only be accessed from the virtual network you just created.

receive a message not authorized to perform this operation. You are not connecting from the virtual network. It may take a couple of minutes for this to take effect.

Ref:
https://learn.microsoft.com/zh-tw/training/modules/optimize-your-cost-azure-blob-storage/
https://learn.microsoft.com/zh-tw/azure/storage/blobs/storage-blob-user-delegation-sas-create-dotnet?tabs=packages-dotnetcli%2Ccontainer