Posted on Jul 16

Provide storage for the IT department testing and training.

#azurefunctions #devops #container #cloud

What is Azure Storage?

An Azure Storage Account is a secure, scalable, and highly available cloud storage service provided by Microsoft Azure. It serves as a foundational resource for storing and managing unstructured and structured data, including blobs (objects), files, queues, tables, and disks. Designed for enterprise-grade durability and performance, Azure Storage Accounts support a wide range of workloads, from big data analytics to backup and disaster recovery.
A storage account provides a unique namespace for your data, serving as the foundational element for storing various data objects like blobs, files, tables, and queues.

In this article, we will be describing more about the features. characteristics and types of cloud storage using the Azure cloud as the model.

-Unique Namespace:
Every object stored within Azure Storage has an address that includes your unique storage account name, forming the base address for objects within that account.
-Foundation for Services:
It acts as the central point for accessing different Azure Storage services, including Blob Storage, File Storage, Table Storage, and Queue Storage.

Key Features

Scalability – Automatically grows with your data.
Durability – Data is replicated (3 copies by default).
Security – Encrypted at rest & in transit.
Accessibility – Available globally via HTTP/HTTPS.
Cost-Effective – Pay only for what you use.

Next, proceed to the guide and procedure on

Create a resource group and a storage account.

In the Azure portal, search for and select Resource Groups.

Select and Create

Give your resource group a name
Select a region. Use this region throughout the project.
Select Review and create to validate the resource group.
Select Create to deploy the resource group.
deployment of a resource group.

2. Create and deploy a storage account to support testing and training

Below is a simple procedure to deploy a storage account in your Resource group:

In the Azure portal, search for and select "Storage accounts"
Select + Create.
On the Basics tab, select your Resource group.
Provide a Storage account name. The storage account name must be unique in Azure.
Set the Performance to Standard.
Select Review, and then Create.

You will wait for validation of your parameters and confirm your deployment settings are accurate before finally creating

Now Create
Wait for the storage account to deploy and then Go to resource.
And confirm that your deployment is completed.

View the newly deployed storage account that has been created.

1. Configure simple settings in the storage account.
Because the data in this storage account doesn’t require high availability or durability. A low-cost storage solution is desired.
i need to configure the redundancy for the local storage to meet this demand. so, I follow this procedure:

In your storage account, in the Data management section, select the Redundancy blade.
Select Locally-redundant storage (LRS) in the Redundancy drop-down.
Save your changes.
Refresh the page and notice the content only exists in the primary location.

2. The storage account should only accept requests from secure connections.
You can configure your storage account to accept requests from secure connections only by setting the Secure transfer required property for the storage account. When you need a secure transfer, any requests originating from an insecure connection are rejected. It's recommended that you require secure transfer for all of your storage accounts, except in certain cases where NFS Azure file shares are used with network-level security. Now,

In the Settings section, select the Configuration blade. Ensure Secure transfer required is Enabled.

3. Developers would like the storage account to use at least TLS version 1.2.
To achieve this, let's follow the simple process below:

In the Settings section, select the Configuration blade. Ensure the Minimal TLS version is set to Version 1.2.

4. Until the storage is needed again, disable requests to the storage account.
This can be configured through the procedure below:

In the Settings section, select the Configuration blade.
Ensure Allow storage account key access is Disabled. Be sure to "Save" your changes.

**5. Ensure the storage account allows public access from all networks. **
For the data or information on this platform (e.g, websites) accessible to the public, access must be configured to permit this. this can be done following the procedure below:

In the Security + networking section, select the Networking blade.
Ensure Public network access is set to Enabled from all networks.
Be sure to save your changes.

The above processes and procedures have completely shown the creation of a resource group and storage account, and configured simple settings in a storage account in a cloud environment or platform through the following: