Secure storage for Azure Files and Azure Blob Storage

In this module, you will:

• Decide how many storage accounts you need for your project
• Determine the appropriate settings for each storage account
• Create a storage account using the Azure portal

In this module, you learn how to:

• Understand the purpose and benefits of Azure Blob Storage.
• Create and configure Azure Blob Storage accounts.
• Manage containers and blobs within Azure Blob Storage.
• Optimize blob storage performance and scalability.
• Implement lifecycle management policies to automate data movement and deletion.
• Determine the best pricing plans for your Azure Blob Storage.

In this module, you learn how to:

• Configure a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
• Configure Azure Storage encryption.
• Implement customer-managed keys.
• Recommend opportunities to improve Azure Storage security.

By the end of this module, you will be able to:

• Define data sovereignty and how that is achieved in Azure
• Configure Azure Storage access in a secure and managed way
• Encrypt your data while it is at rest and in transit
• Apply rules for data retention

In this module, you will:

• Identify the capabilities and features of network security groups.
• Identify the capabilities and features of virtual network service endpoints.
• Use network security groups to restrict network connectivity.
• Use virtual network service endpoints to control network traffic to and from Azure services.

In this module, you practice how to:

• Create and configure a storage account.
• Create and configure blob storage.
• Create and configure Azure Files.
• Configure encryption for storage.
• Configure networking​ for storage.

• Introduction
• Decide how many storage accounts you need
• Choose your account settings
• Choose an account creation tool
• Exercise - Create a storage account using the Azure portal
• Knowledge check - Create a storage account
• Summary

• Introduction
• Implement Azure Blob Storage
• Create blob containers
• Assign blob access tiers
• Add blob lifecycle management rules
• Determine blob object replication
• Upload blobs
• Determine Blob Storage pricing
• Interactive lab simulation
• Knowledge check
• Summary and resources

• Introduction
• Review Azure Storage security strategies
• Create shared access signatures
• Identify URI and SAS parameters
• Determine Azure Storage encryption
• Create customer-managed keys
• Apply Azure Storage security best practices
• Interactive lab simulation
• Knowledge check
• Summary and resources

• Introduction
• Define data sovereignty
• Configure Azure storage access
• Deploy shared access signatures
• Manage Microsoft Entra storage authentication
• Implement storage service encryption
• Configure blob data retention policies
• Configure Azure files authentication​
• Enable the secure transfer required​ property
• Perform Try-This exercises
• Knowledge check
• Summary

• Introduction
• Use network security groups to control network access
• Exercise - Create and manage network security groups
• Secure network access to PaaS services with virtual network service endpoints
• Exercise - Restrict access to Azure Storage by using service endpoints
• Summary

• Introduction
• Exercise - Provide storage for the IT department testing and training
• Exercise - Provide storage for the public website
• Exercise - Provide private storage for internal company documents
• Exercise - Provide shared file storage for the company offices
• Exercise - Provide storage for a new company app
• Knowledge check
• Summary and resources