DEV Community: nadico chris

How to Create and configure a storage account for Azure Files.

nadico chris — Sat, 28 Sep 2024 12:25:40 +0000

Task Content:

Create a storage account specifically for file shares.
Configure a file share and directory.
Configure snapshots and practice restoring files.
Restrict access to a specific virtual network and subnet._

Create and configure a storage account for Azure Files

1- Create a storage account for the finance department’s shared files. Learn more about storage accounts for Azure Files deployments.

In the portal, search for and select Storage accounts

Select + Create.

For Resource group select Create new. Give your resource group a name and select OK to save your changes.
Provide a Storage account name. Ensure the name meets the naming requirements.
Set the Performance to Premium.

Set the Premium account type to File shares.
Set the Redundancy to Zone-redundant storage.
Select Review and then Create the storage account.

Select Go to resource

Create and configure a file share with directory

1- Create a file share for the corporate office. Learn more about Azure File tiers.

In the storage account, in the Data storage section, select the File shares blade.
Select + File share and provide a Name.

Provide Name
Review the other options, but take the defaults. Select Create

2- Add a directory to the file share for the finance department. For future testing, upload a file.

Select your file share and select + Add directory.
Name the new directory finance.

Select Browse and then select the finance directory

Configure and test snapshots

1- Similar to blob storage, you need to protect against accidental deletion of files. You decide to use snapshots. Learn more about file snapshots

Select your file share.
In the Operations section, select the Snapshots blade

Select + Add snapshot. The comment is optional. Select OK

Select your snapshot and verify your file directory and uploaded file are included.

2- Practice using snapshots to *restore a file.
*

Return to your file share.
Locate your uploaded file and in the Properties pane select Delete then Select Yes to confirm the deletion.

Select the Snapshots blade and then select your snapshot
Navigate to the file you want to restore,

- Select the file and the select Restore.

Provide a Restored file name and select ok
Verify your file directory has the restored file.

Configure restricting storage access to selected virtual networks.

1- This tasks in this section require a virtual network with subnet. In a production environment these resources would already be created.

Search for and select Virtual networks

Select Create. Select your resource group. and give the virtual network a name.
Take the defaults for other parameters, select Review + create, and then Create.

Wait for the resource to deploy.
Select Go to resource.

In the Settings section, select the Subnets blade.

Select the default subnet.

In the Service endpoints section choose Microsoft.Storage in the Services drop-down.
Do not make any other changes
Be sure to Save your changes

2- The storage account should only be accessed from the virtual network you just created. Learn more about using private storage endpoints..

Return to your files storage account.
In the Security + networking section, select the Networking blade

Change the Public network access to Enabled from selected virtual networks and IP addresses.

In the Virtual networks section, select Add existing virtual network.

Select your virtual network and subnet, select Add

Select the Storage browser and navigate to your file share.
Verify the message not authorized to perform this operation. You are not connecting from the virtual network.

Technical article on how to Create a storage account and configure high availability.

nadico chris — Fri, 27 Sep 2024 14:58:06 +0000

Table of content for this storage account.

Create a storage account for the company private documents.
Configure redundancy for the storage account.
Configure a shared access signature so partners have restricted - access to a file.
Back up the public website storage.
Implement lifecycle management to move content to the cool tier. Architecture diagram

https://microsoftlearning.github.io/Secure-storage-for-Azure-Files-and-Azure-Blob-Storage/Instructions/Media/task-3.png.

How to Create a storage account and configure high availability. I'll be using ACB/123 to create a step-by-step guide during this activity, let's go!

1- Create a storage account for the internal private company documents.

In the portal, search for and select Storage accounts. Select + Create.
Select the Resource group created in the previous lab.
Set the Storage account name to private. Add an identifier to the name to ensure the name is unique.
Select Review, and then Create the storage account.
Wait for the storage account to deploy, and then select Go to resource.

Sign into your Azure porta account and go to porta menu or sandwich.

Select Storage Account

Select + Create.

Select the Resource group created in the previous lab
Select Review, and then Create the storage account.

additional information Look out for this sign to ensure during the right thing.

Wait for the storage account to deploy, and then select Go to resource.

2- This storage requires high availability if there’s a regional outage. Read access in the secondary region is not required. Configure the appropriate level of redundancy.

In the storage account, in the Data management section, select the Redundancy blade.
Ensure Geo-redundant storage (GRS) is selected.
Refresh the page.
Review the primary and secondary location information.
Save your changes.

Select data management, then redundancy

Ensure Geo-redundant storage (GRS) is selected then refresh page.

Save and refresh

Create a storage container, upload a file, and restrict access to the file.

Create a private storage container for the corporate data.

1- In the storage account, in the Data storage section, select the Containers blade.
Select + Container.
Ensure the Name of the container is private.
Ensure the Public access level **is **Private (no anonymous access).
As you have time, review the Advanced settings, but take the defaults.
Select Create.
Select data storage, then container

Select + Container.

Ensure the Name of the container is private

As you have time, review the Advanced settings, but take the defaults*Create*

2- For testing, upload a file to the private container. he type of file doesn’t matter. A small image or text file is a good choice. Test to ensure the file isn’t publically accessible.

Select the container.
Select Upload.
Browse to files and select a file.
Upload the file.
Select the uploaded file.
On the Overview tab, copy the URL.
Paste the URL into a new browser tab.
Verify the file doesn’t display and you receive an error.
Slect container.

Select Upload.
Browse to files

Upload file.

On the Overview tab, copy the URL and Paste the URL into a new browser tab.

Paste the URL into a new browser tab. Verify the file doesn’t display and you receive an error.

3- An external partner requires read and write access to the file for at least the next 24 hours. Configure and test a shared access signature (SAS). Learn more about Shared Access Signatures.

Select your uploaded blob file and move to the Generate SAS tab
Select Generate SAS

In the Permissions drop-down, ensure the partner has only

Read permissions and then Select Generate SAS token and URL.

Copy the Blob SAS URL to a new browser tab.

Verify you can access the file. If you have uploaded an image file it will display in the browser. Other file types will be downloaded.

Configure storage access tiers and content replication.

1- To save on costs, after 30 days, move blobs from the hot tier to the cool tier. Learn more how manage the Azure Blob storage lifecycle.

Return to the storage account

In the Overview section, notice the Default access tier is set to Hot.

In the Data management section, select the Lifecycle management blade.

Select Add rule.
Set the Rule name to movetocool
Set the Rule scope to Apply rule to all blobs in the storage account then** Select Next.

Ensure Last modified is selected.
Set More than (days ago) to 30.

In the Then drop-down select Move to cool storage.
As you have time, review other lifecycle options in the drop-down ,then select Add the rule.
successfully deployed

2- The public website files need to be backed up to another storage account.[Learn more about object replication.

In your storage account, create a new container called backup. Use the default values. Refer back to Lab 02a if you need detailed instructions.
In the Data management section, select the Object replication blade.

Set the Destination storage account to the private storage account.

Set the Source container to public and the Destination container to backup.

Provide storage for the IT department testing and training

nadico chris — Wed, 18 Sep 2024 13:20:28 +0000

Come with me, let dive into the step-by-step Architecture diagram of storage and testing

- Architecture diagram and Skill tasks

Establish a naming convention.
Create a storage account.
Configure basic settings for security and networking.
Storage Plan
Image description

Create a resource group and a storage account.

1- Create and deploy a resource group to hold all your project resources. Here're the few easy steps to get there, follow me.

Resource groups
Select + Create.

Give your resource group a name. For example, storagerg.
Select a region. Use this region throughout the project.
Select Review and create to validate the resource group.
*ensure you have a green tick like this to progress. *

Select Create to deploy the resource group.

2- Create and deploy a storage account to support testing and training. next steps follow me hands on

In the Azure portal, search for and select Storage accounts.
Select + Create.

select sandwich tab, then the home tab and follow by the storage account.

Select + create

Provide a Storage account name. The storage account name must be unique in Azure.

Set the Performance to Standard.

Select Review, and then Create.

Wait for the storage account to deploy and then Go to resource

step 2

1- Configure simple settings in the storage account
Lets start with a storage account redundancy

In your storage account, in the Data management section, select the Redundancy blade.

Select Locally-redundant storage (LRS) in the Redundancy drop-down and sure to Save your changes.

Refresh the page and notice the content only exists in the primary location.

2- The storage account should only accept requests from secure connections. Learn more about requiring secure transfer from secure connections

In the Settings section, select the Configuration blade

Ensure Secure transfer required is Enabled.

3- Developers would like the storage account to use at least TLS version 1.2. Learn more about transport layer security (TLS)

In the Settings section, select the Configuration blade and
Ensure the Minimal TLS version is set to Version 1.2.

4- Until the storage is needed again, disable requests to the storage account. Learn more about disabling shared keys

In the Settings section, select the Configuration blade.
Ensure Allow storage account key access is Disabled.
Be sure to Save your changes.

5- Ensure the storage account allows public access from all networks

In the Security + networking section, select the Networking blade.

Ensure Public network access is set to Enabled from all networks.
Be sure to Save your changes.

Azure storage account is now successfully created and ready to go. if you like this page, please follow me for more update.
Thank you for your time.

Some key Concept of cloud computing in Azure storage

nadico chris — Sun, 15 Sep 2024 18:47:27 +0000

Explain these key concepts in your word in a blog post

What is Virtualization?
Scalability
Agility
High Availability
Fault Tolerant
Global Reach
What is the difference between Elasticity and Scalability

By Recognizing the Essential Ideas in Contemporary IT, first need to know the meaning of the language/terminology we use in the IT world, then break it down step by step. let's go!

First off, what is virtualization?

Through the use of software known as a hypervisor, virtualization technology enables the operation of numerous virtual machines (VMs) on a single physical computer. Despite sharing the same physical hardware, each virtual machine functions as a separate computer with its own operating system and apps. This method of managing IT infrastructures improves flexibility, lowers expenses, and makes the most use of available resources12.

Equilibrium

The term "scalability" describes a system's capacity to accommodate greater workloads or grow without sacrificing performance. It denotes the ability of a business to expand and effectively handle rising demand. For instance, during busy shopping seasons, a scalable e-commerce platform can accommodate higher user numbers and transaction volumes without experiencing any lag34.

Quickness

In IT and business, agility is the capacity to quickly adjust to changes in the marketplace, in technology, or in internal procedures. In order to be competitive, an agile firm can react quickly to new opportunities or challenges. This calls for not only quickness but also adaptability and operational efficiency56.

Elevated Availability

A system with high availability (HA) is one that is built to guarantee minimal downtime and continuous functioning. This is important for systems that are mission-critical, as even a brief outage might have significant consequences. Redundancy, failover techniques, and routine maintenance to avert failures are how HA systems accomplish this78.

Resilient to Error

A system's fault tolerance refers to its capacity to carry on properly even in the event that some of its constituent parts malfunction. Redundancy and error detection techniques help achieve this by enabling the system to automatically switch to backup components without causing service interruptions. When reliability is crucial in high-availability contexts, fault-tolerant systems are necessary910.

Worldwide Outreach

The ability of a company or service to function and provide goods or services globally is referred to as global reach. The internet frequently helps with this, enabling businesses to effectively manage worldwide supply chains, reach overseas markets, and offer customer service across time zones. It makes it possible for companies to expand into new markets and reach a larger clientele.

The Distinction Between Scalability and Elasticity

Although managing increasing workloads is a component of both scalability and elasticity, they are two different ideas. The ability of a system to expand and handle rising demand over time is known as scalability. Contrarily, elasticity is the capacity to instantly and automatically modify resources in response to changes in demand. An elastic system can flexibly allocate resources during peak usage and release them when demand lowers, whereas a scalable system can add more servers to manage growth.
I hope this helps clarify these key concepts! If you have any more questions or need further details, feel free to ask or leave a message in my page.

Since we have break it down and now understand some the words, we sometime use in IT space.
I'll look forward to seeing you in my next article.
If you like this page, please leave a comment below.
Thank you.