Copying data by using AzCopy – Securing Storage
In this demonstration, we will copy data using the AzCopy utility and SAS tokens. This exercise can also be conducted using Azure AD credentials. Follow these steps to complete the…
Category: Azure URL paths for storage
Configuring file-level permissions – Securing Storage
In this section, we will look at the steps involved to assign share-level permissions: You have now learned how to configure file-level ACLs for Azure Storage shares. This concludes the…
Types of SAS – Securing Storage
There are three types of SAS supported by Azure Storage: • User-delegated SAS: This is aSAS token that is secured by AD credentials. • Account SAS: An account SAS is…
Managing access keys – Securing Storage
In this demonstration, we will explore how to view access keys as well as how to renew them: Figure 7.12 – Show keys Figure 7.13 – Copying an access key…
Network routing from storage accounts – Securing Storage
The default network routing preference option chosen for storage accounts and most Azure services will be for the Microsoft network. This is ahigh-performance, low-latency global connection to all services within…
Private endpoints – Securing Storage
Private endpoints provide a mechanism for Azure Storage accounts to have a private interface for a storage account and can be used to eliminate public access. They provide enhanced security…
Public endpoint and Azure Virtual Network (VNet) integration – Securing Storage
By default, storage accounts are provisioned with a public endpoint, and thanks to the enhanced control Azure offers, network traffic can be limited to those trusted IP addresses and networks…
Exporting from an Azure job – Understanding and Managing Storage
There are two other files created as well—an .xml file and a drive-manifest.xml file. You need these files later for creating an import/export job. The disk is now ready to…
Creating a storage account – Understanding and Managing Storage
For this demonstration, we will first proceed with creating a storage account using the portal and then provide the equivalent PowerShell code to create this using the Az module. Proceed…
PowerShell scripts – Understanding and Managing Storage
Please ensure that the Az module is installed, as per the Technical requirements section at the beginning of the chapter. The following script will create a new storage account (change…