DEV Community: jeremiah enoghase

How To Update and Maintain Azure Resources

jeremiah enoghase — Sun, 16 Aug 2026 11:00:01 +0000

In this article, we will learn about the process of updating and managing Azure Resources, which includes Networks, Virtual Machines, and Storage blobs.

Create A Resource Group

A resource group is a container for keeping similar items together. we can view a resource group like directory or folder

Enter guided-project-rg in the Resource group name field
Select create and review and select create.

Create A Virtual Network with a Subnet.

A Virtual network is an isolated network that allows you to create a private and secure environment for your cloud resources. We can view a VN as a small and private apartment in a bigger or giant building.

From the Azure portal, search for Virtual Network and select Virtual Network.
select + create

Name the virtual network -guided-project-vnet
Select Review + Create, then select Create.

Wait for it to deploy and select go to Resources

Create A Virtual Machine.

A virtual Machine is software that allows you to run applications and containers without the need for physical hardware.

From the Azure portal, search for Virtual Machine and select Virtual Network.
select + create

Select guided-project-rg for the Resource group.

Enter guided-project-vm for the Virtual machine name.
For the Image, select one of the Ubuntu Server options.
Select Password for authentication type.
Enter guided-project-admin for the admin Username.
Enter a password for the admin account.
Confirm the password for the admin account.

Leave the rest of the settings as default settings.
Select Review + create to confirm the resource cost and create the virtual machine

Select Go to resource

Create A Storage Account.

From the Azure portal, search for Storage account and select.
Select + Create

Name the Storage account "guidedprojectstorage37".
Select Review + create and select Create.

Wait for the resource to deploy and select Go to resources

Update The Virtual Network

The steps below are carried out to update our Virtual network.

Create a new subnet on an existing virtual network (vNet)

_Note: subnets are needed for organizing and managing resources within a virtual Network
_

Navigate to the Virtual Network (guidedproject-vnet) that was created earlier. From the guided-project-vnet blade, under Settings, select Subnets.
Select + Subnet
For Subnet purpose leave it as Default.
For Name enter: ftpSubnet.
Leave the rest of the settings alone and select Add.

Create a network security group

From the Azure portal home page, in the search box, enter virtual networks.
Select virtual networks under services.
Select Network security groups.
Select + Create

Verify the subscription is correct.
Select the guided-project-rg resource group.
Enter ftpNSG for the network security group name.
Select Review + create.

Select Create

-Wait for it to deploy and then select Go to resource.

### Create an inbound security rule
Under settings, select Inbound security rules.
Select + Add.
Change the Destination port ranges from 8080 to 22.
Select TCP for the protocol.
Set the name to ftpInbound.
Select Add.
Select Home to return to the Azure portal home page.

## Associate a network security group to a subnet -From the Azure portal home page, in the search box, enter virtual networks.
Select virtual networks under services.
Select the guided-project-vnet virtual network.
Under settings, select Subnets.
Select the ftpSubnet you created.
On the Edit subnet page, under the Security section heading, update the Network security group field to ftpNSG.
Select Save.

Kindly Leave your Comments.
Thank You.

How to provide shared file storage for company offices

jeremiah enoghase — Sat, 15 Aug 2026 09:33:04 +0000

In this article, we will share the process of providing shared file storage for company offices dispersed in different locations to ease file sharing and the dissemination of information.

The first step is to Create a storage account specifically for file shares.

In the portal, search for and select Storage accounts. Select + Create.

For Resource group select Create new. Give your resource group a name and select OK to save your changes.

Provide a Storage account name. Ensure the name is unique
Set the Performance to Premium.
Set the Premium account type to File shares.
Set the Redundancy to Zone-redundant storage.
Select Review and then Create the storage account.

Wait for the resource to deploy and select Go to resource.

The next step is to create and configure a file share with directory.

In the Data storage section of the storage account, select the Classic file shares blade.
Select + Classic file share and provide a Name.

Review the other options but take the defaults.
Select Create

Select your file share and select + Add directory.
Name the new directory finance.

Select Browse and then select the finance directory.
Upload a file of your choosing.

Configure and test snapshots.

This is done to protect against accidental deletion of files.

Select your file share. In the Operations section, select the Snapshots blade. Select + Add snapshot. The comment is optional. Select OK.

Select your snapshot and verify your file directory and uploaded file are included.
Practice using snapshots to restore a file.

Return to your file share.
Browse to your file directory.
Locate your uploaded file and in the Properties pane select Delete.
Select Yes to confirm the deletion.
Select the Snapshots blade and then select your snapshot.
Navigate to the file you want to restore,
Select the file and the select Restore.
Provide a Restored file name.

Configure restricting storage access to selected virtual networks.

Search for and select Virtual networks.

Select Create. Select your resource group. and give the virtual network a name.

Take the defaults for other parameters, select Review + create, and then Create.

Wait for the resource to deploy.

Select Go to resource.

In the Settings section, select the Subnets blade.
Select the default subnet.
In the Service endpoints section choose Microsoft.Storage in the Services drop-down.

Do not make any other changes.
Be sure to Save your changes.

To ensure the storage account should only be accessed from the virtual network you just created, the following steps below is carried out.

Return to your files storage account.
In the Security + networking section, select the Networking blade.

Change the Public network access to Enabled from selected networks.
In the Virtual networks section, select Add existing virtual network.
Select your virtual network and subnet, select Add. Be sure to Save your changes.

Select the Storage browser and navigate to your file share. Verify the message not authorized to perform this operation. You are not connecting from the virtual network.

How to provide private storage for internal company's documents

jeremiah enoghase — Sat, 25 Jul 2026 11:37:38 +0000

This article provides the guidelines on how to provide private storage for internal company's documents.

Note: This process requires you to have created a storage for a public website because we will be using the resource group.

The first step is to create a storage account and configure high availability.

Kindly follow the process below to achieve this.

Search for and select Storage accounts in the Azure portal

Select + Create.

Select the Resource group created in the previous lab.
Set the Storage account name to private by adding an identifier to make the name unique.
Select Review + create and then Create the storage account. Wait for the storage account to deploy, and then select Go to resource.

Configure the appropriate level of redundancy.

In the Data management section of the storage account, select the Redundancy blade and ensure Geo-redundant storage (GRS) is selected.

And ensure to save your changes.

The next step is to create a storage container, upload a file, and restrict access to the file.

Kindly follow the process below to achieve this.

In the Data storage section of the storage account, select the Containers blade.
Select + Container and ensure the Name of the container is private.
Ensure the Public access level is Private (no anonymous access).
Select Create.

Testing for file upload.

Select the container.
Select Upload.
Browse to files and select a file. Upload the file and select the uploaded file.
On the Overview tab, copy the URL.
Paste the URL into a new browser tab. Verify the file doesn’t display and you receive an error.

all set and done. Now to the next phase.

An external partner requires read and write access to the file for at least the next 24 hours. Configure and test a shared access signature (SAS).

Select your uploaded blob file and move to the Generate SAS tab. In the Permissions drop-down, ensure the partner has only Read permissions. Verify the Start and expiry date/time is for the next 24 hours.
Select Generate SAS token and URL.
Copy the Blob SAS URL to a new browser tab. Verify you can access the file. If you have uploaded an image file it will display in the browser. Other file types will be downloaded.

Configure storage access tiers and content replication.

For Cost minimization, after 30 days, move blobs from the hot tier to the cool tier.

Return to the storage account. In the Overview section, you will notice that the Default access tier is set to Hot.
Select the Lifecycle management blade in the Data management section
Select Add rule.
Set the Rule name to movetocool.
Set the Rule scope to Apply rule to all blobs in the storage account.
Select Next.

Ensure Last modified is selected. Set More than (days ago) to 30.
In the drop-down select Move to cool storage.
As you have time, review other lifecycle options in the drop-down.
Add the rule.

The public website files need to be backed up to another storage account.

This is carried out with the steps below.

In your storage account, create a new container called backup.

Navigate to your publicwebsite storage account.

Select the Object replication blade, In the Data management section
Select Create replication rules.

Set the Destination storage account to the private storage account.
Set the Source container to public and the Destination container to backup.
Create the replication rule.

This is how you provide private storage for internal company's documents.

kindly review and leave your comments.

Thank You.

How to Provide storage for the public website

jeremiah enoghase — Fri, 24 Jul 2026 14:12:23 +0000

This article describes the process guidelines for providing storage for a public website.

The first step is to create a storage account with high availability.

in the Azure portal, search for and select storage accounts.

select +create

click on create new for the resource group, give it a name and select ok. set the storage account to public website and ensure it is unique by adding identifier. Select Review + Create.

click on create and wait for storage to deploy and then click on go to resource.

In the Data management section in the storage account, select the Redundancy blade and ensure Read-access Geo-redundant storage is selected and click on save.

-In the Settings section of the storage account, select the Configuration blade. Ensure the Allow blob anonymous access setting is Enabled and click on save.
Note: this is carried out to ensure the public website is accessible without requiring customers to login.

The next step is to create a blob storage container with anonymous read access.

In the Data storage section of the storage account, select the Containers blade. Select + Container and ensure the Name of the container is public. Select Create.

Select your public container. On the Overview blade, select Change access level. Ensure the Public access level is Blob (anonymous read access for blobs only). Select OK. Note: this is to ensure Customers are able to view the images without being authenticated.

Practice uploading files and testing access

Ensure you are viewing your container. Select Upload.
Browse to files and select a file and select Upload.
Close the upload window, Refresh the page and ensure your file was uploaded.

Determine the URL for your uploaded file. Open a browser and test the URL.

Select your uploaded file. On the Overview tab, copy the URL. Paste the URL into a new browser tab. If you have uploaded an image file, it will display in the browser.

Configure soft delete

configuring soft delete ensures that the website documents can be restored if they’re deleted.

Go to the Overview blade of the storage account. -In the Data management section, select the Data protection blade -Ensure that the enable soft delete for blobs is checked. -Change the Keep deleted blobs for (in days) setting to 21. Notice you can also Enable soft delete for containers. Don’t forget to Save your changes.

Configure blob versioning

Go to the Overview blade of the storage account. -In the Data management section, select the Data protection blade. -Ensure the Enable versioning for blobs checkbox is checked. Notice your options to keep all versions or delete versions after

kindly review and leave your comments.

Thank You

How to provide storage for the IT department testing and training

jeremiah enoghase — Sat, 18 Jul 2026 12:32:16 +0000

Below are the step-by-step instructions for providing storage for the IT department testing and training.

login to the azure portal

select resource groups and click on create

Give the resource group a unique name and select region and click on review and create.

The next step is to click on create as seen on the image below.

Create and deploy a storage account to support testing and training.

In the Azure portal, search for and select storage account and select create.

On the Basics tab, select your Resource group.
provide the storage account name, set performance to standard, then select review+create and then create.

Wait for the storage account to deploy and then Go to resource.

How to configure simple settings in the storage account.

Select the Redundancy blade in the Data management section in the storage account and Select Locally redundant storage (LRS) in the Redundancy drop-down and click on save.

Note: This setting is implemented because the data in this storage account doesn’t require high availability or durability, and a low-cost storage solution is desired.

*In the settings section, select configuration blade and ensure *

Secure transfer required is enabled.
The Minimal TLS version is set to Version 1.2.
Allow storage account key access is Disabled and save your update.

To ensure the storage account allows access from public network

Select the Networking blade in the Security + networking section and ensure_ Public network access is set to Enabled from all networks._

I hope you find these steps above helpful.

Thank You.