Storage accounts can provide identity-based authentication through either Active Directory (on-premises) or Azure Active Directory Domain Services (AADDS). Both offer the ability to utilize Kerberos authentication offered by Active Directory.…
A storage access policy provides an additional layer of control over SAS by introducing policies for managing the SAS token. SAS tokens can now be configured for a start and…
There are three types of SAS supported by Azure Storage: • User-delegated SAS: This is aSAS token that is secured by AD credentials. • Account SAS: An account SAS is…
In this demonstration, we will explore how to view access keys as well as how to renew them: Figure 7.12 – Show keys Figure 7.13 – Copying an access key…
The default network routing preference option chosen for storage accounts and most Azure services will be for the Microsoft network. This is ahigh-performance, low-latency global connection to all services within…
Thanks to Azure Storage Explorer, working with blobs on a storage account is very similar and just as easy as working on a file share. For this exercise, we will…
In the following section, we will work through an example of how we can create file shares and blob storage on a storage account. Creating an Azure file share In…
There are two other files created as well—an .xml file and a drive-manifest.xml file. You need these files later for creating an import/export job. The disk is now ready to…
For this demonstration, we will first proceed with creating a storage account using the portal and then provide the equivalent PowerShell code to create this using the Az module. Proceed…
Thisoption is chosen to protect against a region failure while also offering protection within a single data center for each region. Effectively, you get six copies of data (three in…