Learn about Azure Storage Security : Secure Data in Azure

Secure Access to Blobs, Files,table, Queues

Created byVarinder K

Last updated 7/2020

English

English [Auto],

What you'll learn

Cloud Security Shared responsibility model
Azure Storage account overview
Methods for Securing storage accounts
Azure storage Data plane Security
Azure storage Management plane Security
Limitation of using storage account Keys
Security using SAS Keys
Azure storage security layers
Securing access using firewall and Service Endpoints

Course content

4 sections • 17 lectures • 1h 41m total length

Introduction2:03
Learn the cloud security shared responsibility model for Azure storage, and explore storage options, data plane security, access keys, encryption, and network protections.
Cloud Security - Shared Responsibility Model8:20
Explore the cloud shared responsibility model, clarifying CSP versus customer duties across IaaS, PaaS, and SaaS, and emphasizing that data security, governance, and compliance remain customer responsibilities.

Storage account Security Overview4:19
Discover how storage accounts use unique names and primary and secondary access keys to authenticate and access data, and why rotating keys regularly prevents downtime.
Notes : Azure Storage account Overview0:41
Lab - Create Azure Storage Account3:17
Create an Azure storage account by selecting subscription and resource group, naming a unique account, choosing standard general purpose or blob, enabling secure transfer, and exploring containers, tables, and queues.
Lab - Azure Storage explorer3:02
Learn to access and manage Azure storage accounts using the console and the free Microsoft Storage Explorer, including creating blob containers and managing queues and tables across subscriptions.
Management Plane and Data Plane3:09
Explore the management plane and data plane for azure storage, including access controls, iam roles, keys, and shared access signatures to guard storage operations and data.

Methods for Securing Storage account9:09
Explore methods to secure a storage account with authentication and authorization options, including keys, shared access signatures, and identity-based access for blobs and files, encryption in transit and at rest.
Azure Storage - Security Layers13:51
Explore management plane access, data plane controls, and encryption in transit and at rest for Azure storage security.
Storage Account Data Plane Security5:34
Explore storage account data plane security by examining access to data in blob, table, and file storage, including RBAC, tokens, shared access signatures, storage keys, and policy-based controls.
Limitations of using Storage account Keys for Authorization3:48
Explore the limitations of storage account keys, including blanket access and revocation risks, and why shared access signatures offer granular, time-bound access to specific services.
Lab - Access Storage account via Access Keys3:07
Access a storage account using access keys and storage explorer, then switch to shared access signatures to restrict access to blobs, files, queues, and tables.
Demo :Create Storage Account, Use of Access Key, RBAC10:18
Create a storage account, manage access keys securely, and apply RBAC with service principals to control blob data access; store secrets in a key vault rather than hard coding.
Demo : Enable Encryption In-Transit and at rest for Storage account5:33
Explore how to enable encryption at rest with customer-managed keys for blob and file storage, and enable encryption in transit for storage accounts.
Demo: Storage Network Security and Configure Private Endpoints10:19
Learn how firewall and virtual networks protect Azure Storage, and how to secure data transfers with private endpoints and private links for private access to blob storage.
Shared Access Signature Key Deep Dive11:44
Learn how shared access signatures grant granular, time-limited access to storage resources using service or account level SAS, ad hoc SAS, and stored access policies.
Lab - Access Storage account using SAS keys3:07
Access a storage account using access keys with the storage explorer, exploring containers, blobs, queues, and tables. Discover how shared access signatures provide restricted, granular data access beyond key access.

Requirements

Azure fundamentals
Zeal to learn
Focused mind with cup of coffee :)

Description

Azure Storage is a Microsoft-managed cloud storage service, that provides highly available, durable, scalable and redundant storage, at a fraction of the cost, if you were to manage it manually. In this blog on Azure Storage, you will learn the different storage offerings from Azure such as tables, blobs, file storage and queues!

Organizations leverage Azure storage to store variety of Data like business use, PII or even confidential data, therefore is critical to understand the various options Microsoft provides to secure the data stored in storage account using tables, blobs, file storage and queues.

Course Introduction:

Before learning about Storage account security we have introduced lecture on "CLOUD SECURITY SHARED RESPONSIBILITY MODEL" and reason is Azure storage is PAAS service wherein securing Storage account is shared responsibilities between MICROSOFT AZURE and CLOUD CUSTOMER. Given detailed lecture will help you to have solid understanding on security and compliance in Cloud

In this Course you will learn:

Azure Storage account overview
Methods for Securing storage accounts
Securing Access using Azure Active Directory
Concept of Management Plane
Concept of Data Plane
Azure storage Data plane Security.
Azure storage Management plane Security
Limitation of using storage account Keys
Security using SAS Keys
Azure storage security layers
Securing access using firewall and Service Endpoints

Who this course is for:

Anyone passionate to secure workloads in Azure

Learn about Azure Storage Security : Secure Data in Azure

What you'll learn

Explore related topics

Course content

Course Introduction2 lectures • 10min

Azure Storage Overview5 lectures • 14min

Securing Azure Storage Account10 lectures • 1hr 17min

Conclusion0

Requirements

Description

Who this course is for: