Storage access policies – Securing Storage
A storage access policy provides an additional layer of control over SAS by introducing policies for managing the SAS token. SAS tokens can now be configured for a start and…
A storage access policy provides an additional layer of control over SAS by introducing policies for managing the SAS token. SAS tokens can now be configured for a start and…
There are three types of SAS supported by Azure Storage: • User-delegated SAS: This is aSAS token that is secured by AD credentials. • Account SAS: An account SAS is…
In this demonstration, we will explore how to view access keys as well as how to renew them: Figure 7.12 – Show keys Figure 7.13 – Copying an access key…
The default network routing preference option chosen for storage accounts and most Azure services will be for the Microsoft network. This is ahigh-performance, low-latency global connection to all services within…
Private endpoints provide a mechanism for Azure Storage accounts to have a private interface for a storage account and can be used to eliminate public access. They provide enhanced security…
In the following section, we will work through an example of how we can create file shares and blob storage on a storage account. Creating an Azure file share In…
There are two other files created as well—an .xml file and a drive-manifest.xml file. You need these files later for creating an import/export job. The disk is now ready to…
For this demonstration, we will first proceed with creating a storage account using the portal and then provide the equivalent PowerShell code to create this using the Az module. Proceed…
Please ensure that the Az module is installed, as per the Technical requirements section at the beginning of the chapter. The following script will create a new storage account (change…
Standard disk storage offers a hard disk drive (HDD) to store data on, and it is the most cost-effective storage tier that you can choose. It can only use LRS…