
Discover how storage accounts use unique names and primary and secondary access keys to authenticate and access data, and why rotating keys regularly prevents downtime.
Explore methods to secure a storage account with authentication and authorization options, including keys, shared access signatures, and identity-based access for blobs and files, encryption in transit and at rest.
Explore storage account data plane security by examining access to data in blob, table, and file storage, including RBAC, tokens, shared access signatures, storage keys, and policy-based controls.
Explore the limitations of storage account keys, including blanket access and revocation risks, and why shared access signatures offer granular, time-bound access to specific services.
Learn how shared access signatures grant granular, time-limited access to storage resources using service or account level SAS, ad hoc SAS, and stored access policies.
Azure Storage is a Microsoft-managed cloud storage service, that provides highly available, durable, scalable and redundant storage, at a fraction of the cost, if you were to manage it manually. In this blog on Azure Storage, you will learn the different storage offerings from Azure such as tables, blobs, file storage and queues!
Organizations leverage Azure storage to store variety of Data like business use, PII or even confidential data, therefore is critical to understand the various options Microsoft provides to secure the data stored in storage account using tables, blobs, file storage and queues.
Course Introduction:
Before learning about Storage account security we have introduced lecture on "CLOUD SECURITY SHARED RESPONSIBILITY MODEL" and reason is Azure storage is PAAS service wherein securing Storage account is shared responsibilities between MICROSOFT AZURE and CLOUD CUSTOMER. Given detailed lecture will help you to have solid understanding on security and compliance in Cloud
In this Course you will learn:
Azure Storage account overview
Methods for Securing storage accounts
Securing Access using Azure Active Directory
Concept of Management Plane
Concept of Data Plane
Azure storage Data plane Security.
Azure storage Management plane Security
Limitation of using storage account Keys
Security using SAS Keys
Azure storage security layers
Securing access using firewall and Service Endpoints