- Module 1: Discover ways to use an Azure Storage account to manage your data for billing, access, and storage location of your blobs, files, queues, and tables.
In this module, you will:
- Decide how many storage accounts you need for your project
- Determine the appropriate settings for each storage account
- Create a storage account using the Azure portal
- Module 2: Learn how to configure Azure Blob Storage, including tiers and object replication.
In this module, you learn how to:
- Understand the purpose and benefits of Azure Blob Storage.
- Create and configure Azure Blob Storage accounts.
- Manage containers and blobs within Azure Blob Storage.
- Optimize blob storage performance and scalability.
- Implement lifecycle management policies to automate data movement and deletion.
- Determine the best pricing plans for your Azure Blob Storage.
- Module 3: Learn how to configure common Azure Storage security features like storage access signatures.
In this module, you learn how to:
- Configure a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
- Configure Azure Storage encryption.
- Implement customer-managed keys.
- Recommend opportunities to improve Azure Storage security.
- Module 4: Ensure your data is stored, transferred, and accessed in a secure way using Azure storage and file security features.
By the end of this module, you will be able to:
- Define data sovereignty and how that is achieved in Azure
- Configure Azure Storage access in a secure and managed way
- Encrypt your data while it is at rest and in transit
- Apply rules for data retention
- Module 5: Find out how Azure network security groups and service endpoints help you secure your virtual machines and Azure services from unauthorized network access.
In this module, you will:
- Identify the capabilities and features of network security groups.
- Identify the capabilities and features of virtual network service endpoints.
- Use network security groups to restrict network connectivity.
- Use virtual network service endpoints to control network traffic to and from Azure services.
- Module 6: In this module, you practice storing business data securely by using Azure Blob Storage and Azure Files. The lab combines both learning and hands-on practice.
In this module, you practice how to:
- Create and configure a storage account.
- Create and configure blob storage.
- Create and configure Azure Files.
- Configure encryption for storage.
- Configure networking​ for storage.
Secure storage for Azure Files and Azure Blob Storage
Overview
Syllabus
- Module 1: Module 1: Create an Azure Storage account
- Introduction
- Decide how many storage accounts you need
- Choose your account settings
- Choose an account creation tool
- Exercise - Create a storage account using the Azure portal
- Knowledge check - Create a storage account
- Summary
- Module 2: Module 2: Configure Azure Blob Storage
- Introduction
- Implement Azure Blob Storage
- Create blob containers
- Assign blob access tiers
- Add blob lifecycle management rules
- Determine blob object replication
- Upload blobs
- Determine Blob Storage pricing
- Interactive lab simulation
- Knowledge check
- Summary and resources
- Module 3: Module 3: Configure Azure Storage security
- Introduction
- Review Azure Storage security strategies
- Create shared access signatures
- Identify URI and SAS parameters
- Determine Azure Storage encryption
- Create customer-managed keys
- Apply Azure Storage security best practices
- Interactive lab simulation
- Knowledge check
- Summary and resources
- Module 4: Module 4: Implement storage security
- Introduction
- Define data sovereignty
- Configure Azure storage access
- Deploy shared access signatures
- Manage Microsoft Entra storage authentication
- Implement storage service encryption
- Configure blob data retention policies
- Configure Azure files authentication​
- Enable the secure transfer required​ property
- Perform Try-This exercises
- Knowledge check
- Summary
- Module 5: Module 5: Secure and isolate access to Azure resources by using network security groups and service endpoints
- Introduction
- Use network security groups to control network access
- Exercise - Create and manage network security groups
- Secure network access to PaaS services with virtual network service endpoints
- Exercise - Restrict access to Azure Storage by using service endpoints
- Summary
- Module 6: Module 6: Guided Project - Azure Files and Azure Blobs
- Introduction
- Exercise - Provide storage for the IT department testing and training
- Exercise - Provide storage for the public website
- Exercise - Provide private storage for internal company documents
- Exercise - Provide shared file storage for the company offices
- Exercise - Provide storage for a new company app
- Knowledge check
- Summary and resources
