DEV Community: Onyemachi Doris

Getting Started with Azure VM Scale Sets: Concepts and Deployment Guide

Onyemachi Doris — Thu, 19 Feb 2026 00:21:33 +0000

INTRODUCTION
If you’re building applications that need to scale automatically and handle varying workloads, Azure Virtual Machine Scale Sets (VMSS) are your go-to solution. They let you deploy and manage identical virtual machines that can scale-in or scale-out based on demand, all while ensuring high availability.

What Are Virtual Machine Scale Sets?
A Virtual Machine Scale Set is a collection of VMs configured to work together as a single unit. With Virtual Machine Scale Sets, there’s no need to pre-provision VMs. This makes it easy to build large-scale services for compute-intensive tasks, big data processing, or containerized workloads. As your workload grows, Azure can automatically add more VM instances to handle the demand. When demand decreases, it can remove VM instances to save costs.

Key benefits include:
1. Automatic scaling: You can add or remove VM instances based on demand.

2. High availability: It distributes VMs across fault domains to reduce single points of failure.

3. Flexible configurations: You use custom VM images, Azure Spot instances, or managed disks for flexible configurations.

Steps to Create a VM Scale Set in Azure
You can create a scale set directly in the Azure portal. Here’s what to configure:

1. Orchestration Mode: This allows you choose how the scale set manages VM instances. This can be;

Uniform Mode: Azure generates identical VM instances based on a single model. Best for predictable workloads.

Flexible Mode: You can manually add VMs of any configuration. Best for mixed workloads or custom setups.

2. Image: Select the base operating system or application you want your VMs to run which can be Windows, Linux, etc.

3. VM Architecture: Azure gives you two options;

x64 VMs: This provides maximum software compatibility.

Arm64 VMs: Provides up to 50% better price-performance for supported workloads.

*Choose your VM architecture based on your app requirements and cost-performance balance.

4. VM Size: Pick a size that supports your workload. VM size determines; CPU and memory, storage capacity and hourly cost. Azure offers a wide range of sizes, so you can optimize for performance and cost.

Deployment Steps;
1.

Summary
VM Scale Sets are a powerful way to scale applications in Azure. By configuring the orchestration mode, VM size, architecture, and spreading algorithm, you can:

a. Deploy multiple VMs efficiently.

b. Automatically scale based on demand.

c. Improve fault tolerance and availability.

If you’re running web apps, APIs, or backend services, VM Scale Sets are a great foundation for building resilient, scalable cloud applications.

Like, Comment and Share!

How to Create a VM Running a Web Server on Ubuntu

Onyemachi Doris — Tue, 03 Feb 2026 22:36:17 +0000

If you’re new to Azure and want to run Linux in the cloud, creating an Ubuntu Virtual Machine (VM) is a great place to start. In this guide, I’ll walk you through the process step-by-step using the Azure Portal.

What you’ll need

An Azure account
A subscription

Step 1: Create a Virtual Machine

a. Sign in to the Azure Portal.

b. Search for Virtual Machines.

c. Click Create → Azure virtual machine

Step 2: Configure the Basics by filling in the following details:

a. Subscription: Select your subscription

b. Resource group: Create new or select existing

c. Virtual machine name: e.g. Ubuntu-vm

d. Region: Choose the nearest region

e. Image: Ubuntu Server 22.04 LTS because we are creating a Ubuntu VM

f. Size: Any basic size, I used Standard.

Step 3: Authentication

a. Authentication type: SSH public key

b. Username: e.g. azureuser

c. SSH key: Generate a new key pair. Download and store it securely when the prompt comes up. This key is important for authentication purposes.

Step 4: Networking

a. Public inbound ports: Allow selected ports

b. Select inbound ports: SSH (22). This allows you to securely connect to the Ubuntu VM.

Step 5: Review and Create

a. Click Review + Create

b. Validation runs automatically

c. Click Create

Azure will now deploy your Ubuntu VM.

Video Walkthrough

Here’s a full video walkthrough showing the entire process in the Azure Portal:

https://youtu.be/q-iuWzVwrlI

Deploying an Azure Web App: A Step-by-Step Guide

Onyemachi Doris — Fri, 28 Feb 2025 21:44:41 +0000

Introduction

Deploying a web app on Azure App Service is an easy and efficient way to host web applications without worrying about managing infrastructure. All you have to do is to use an Azure platform to deploy a web app; Oh! that's why it falls under Platform as a Service. Azure App Service supports various programming languages and frameworks, including .NET, Java, Python, Node.js, and PHP. In this article, we will walk through the process of deploying a web application on Azure.

Prerequisites for Deploying a Web App in Azure
There are 3 important resources you need before deploying an Azure web app. They are;

A resource group
An empty web app
A plan

And most importantly, you must have an Azure account and a subscription.

Now, Let's deploy a web app!

Step 1: Create an Azure Web App Using Azure Portal

a. Navigate to Azure Portal.

b. Search for App Services

b. Click on Create and Select Web App

c. Create a new Resource group or use an existing one.

d. Provide a unique name for App Name. Select a Runtime Stack. I used .NET 6(LTS) which is Windows.

e. Choose a region and an app service plan based on your budget and scaling needs. Then, Review+Create

f. Then Create.

g. After deployment, Go to Resource

To ensure that what you deployed is an empty web app. Navigate to the Web app and click on default domain.

It will take you to a page like this. That means your page is empty and awaiting contents.

Step 2: Deploy your web app. I did mine by navigating to the Web app I created on Azure portal then to Advanced tools. In advanced tools, click on Go.
You can also deploy using GitHub or Azure CLI.

a. This environment will come up. Then click on debug console.

b. Select CMD

c. Select site.

d. Select wwwroot which is the publicly accessible base folder of a website.

e. Click on the editing pen in the middle as highlighted.

f. Highlight the existing link and delete.

g. Go to ChatGPT and create a html, css and javascript code for the type of website you want to deploy. Copy it and paste. Click on Save.
If this is a real life situation, then get the code from the software engineers.

Step 3: Verify the deployment.

a. Go back to the web app on Azure portal and click on default domain.

b. Your web app should be live!

Conclusion
Deploying a web application on Azure App Service is straightforward and provides flexibility for various use cases. With CI/CD integration, custom domains, and scalability options, Azure Web Apps ensure your application is secure, performant, and highly available.

Enjoyed what you read? Please like, comment and share!

Understanding Key Concepts in Cloud Computing

Onyemachi Doris — Wed, 22 Jan 2025 22:45:28 +0000

Introduction

Cloud computing is the delivery of computing services over the Internet. It has revolutionized how businesses operate by offering powerful tools and resources for managing data and applications. Some of the fundamental concepts that will help you better understand this transformative technology are explained below.

1. Virtualization
Virtualization is the creation of virtual versions of physical hardware, such as servers, storage, and networks. It allows multiple virtual machines (VMs) to run on a single physical machine, maximizing resource efficiency and flexibility. It is a cornerstone of cloud computing, enabling providers to offer scalable and cost-effective services.

2. Scalability
Scalability refers to the ability of a cloud system to grow or shrink its resources based on demand. For instance, a business can add more storage or computing power during peak times and scale back when demand decreases. This ensures optimal performance without overprovisioning resources.

3. Agility
Agility in cloud computing is the ability to quickly adapt to changes, such as shifting workloads, launching new applications, or implementing updates. The flexibility provided by cloud platforms empowers businesses to innovate and respond to market demands more rapidly.

4. High Availability
High availability ensures that cloud services are accessible and operational at all times. It is often measured as uptime percentages (e.g., 99.99%) and achieved through redundancies, load balancing, and failover mechanisms that minimize disruptions.

5. Fault Tolerance
Fault tolerance is the capability of a system to continue operating effectively even if part of it fails. In cloud computing, this often involves replicating data and distributing workloads across multiple servers or data centers to avoid service interruptions.

6. Global Reach
Cloud platforms have a worldwide network of data centers, enabling users to access resources and services from virtually anywhere. This global reach ensures lower latency, faster performance, and compliance with regional data regulations.

The Difference between Elasticity and Scalability
Although elasticity and scalability are often used interchangeably, they are distinct concepts.

Elasticity is the automatic adjustment of resources to meet current demands. For example, resources scale up during a traffic surge and automatically scale down when traffic decreases.
Scalability, on the other hand, involves adding or removing resources in a planned and often manual manner to accommodate future growth or changes.

Conclusion
Understanding these cloud computing concepts is essential for leveraging the full potential of the cloud. Whether you are scaling your applications, ensuring high availability, or expanding your reach globally, the cloud provides the tools to adapt and thrive in a digital-first world.

What’s your favorite feature of cloud computing? Let us know in the comments below!

How to Create a Linux VM using Custom Templates

Onyemachi Doris — Sun, 27 Oct 2024 15:03:12 +0000

Introduction
What is a Linux Virtual Machine?
What are Custom VM Templates?
Advantages of Using Templates over Manual Configuration
Steps on how to create a Linux VM using custom templates
Conclusion

Introduction

Virtual machines (VMs) play an essential role in today’s IT infrastructure, offering isolated environments for development, testing, and production without the need for specialized physical servers. By using custom templates to create Linux VMs, organizations can streamline the setup process, maintain consistency, and ensure reliable, repeatable deployments.

What is a Linux Virtual Machine?

A Linux Virtual Machine (VM) is a virtual version of the Linux operating system hosted on hypervisor platforms like VMware, VirtualBox, or Hyper-V. It allows you to replicate a fully functional Linux system on shared physical hardware, providing isolated software environments for better resource management and flexibility.

What are Custom VM Templates?

Custom VM templates enable quick deployment of pre-configured virtual machines. These templates serve as reusable "blueprints" that contain an operating system and software configuration, simplifying the creation of new VMs by removing the need to perform repetitive setup processes. We are going to be exploring how to create a Linux VM using a custom template in this article.

Advantages of Using Templates over Manual Configuration

Some of the advantages of using custom VM templates include;

Efficiency: It instantly launch new VMs without the need for manual configuration.
Consistency: It ensure uniform configuration across all deployed VMs.
Scalability: It simplifies the management of multiple VMs in large-scale operations.

Steps on how to create a Linux VM using custom templates

To set up a Linux virtual machine (VM) using a custom template, you essentially need three key components: a resource group, a username, and a password.

Resource Group: This is a logical container in which similar Azure resources are deployed and managed. It helps you organize and control access to the resources associated with your VM, such as networking, storage, and compute resources.

Username: This is the administrative account name you’ll use to access the VM. It’s important to choose a unique username that complies with the naming conventions of your cloud provider.

Password: Along with the username, you’ll set a secure password to protect your VM. This password should be strong and complex, combining letters, numbers, and special characters, to enhance security.

step 1: Search for "deploy a custom template" on your Azure portal.

Step 2: Select "create a Linux virtual machine.

Step 3: Add your resource group, username and password. Click "Review + Create" and then "create".

Step 4: After deployment, click "Go to Resource Group"

Step 5: Select simple Linux VM because that's the VM we created.

How to stop the VM

You have to stop the VM so it won't be incurring cost when not in use. To do this; click on "Stop"

If you stop it by using the "Stop" button only, it will still be incurring cost. So, you have to dissociate the IP address of the Linux VM.

Dissociate the IP address.

Search and click Public IP address.

Select the Linux VM

Click on "Dissociate"

Let's say you want to associate the IP address to the VM again. This is how to do achieve that.

On the same page, click "Associate" button Fill in your resource group details and click "OK" as shown below.

How to Connect to a Linux VM using Password Authentication

Launch a text editing program, such as Microsoft Word.
Type ssh username@ipaddress
For example; ssh azureuser@4.248.39.78
Copy all. Open your Windows PowerShell as Admin and paste.

Conclusion

In summary, creating a Linux virtual machine (VM) with a custom template streamlines deployment by ensuring consistency, faster configuration, and environments specifically tailored to unique requirements. This approach facilitates easier management and scalability in cloud environments, where resource groups, usernames, and passwords can be securely established according to organizational standards.

Providing Storage for a New Company App

Onyemachi Doris — Fri, 04 Oct 2024 21:26:39 +0000

Introduction
Types of Storage Options
Importance of Storage in App Development
Step-by-Step Guide to Creating a Storage Account for a new Company App
Conclusion

Introduction

Apps are currently an essential component of our everyday life. They meet a multitude of requirements and preferences, ranging from social networking to productivity tools. It's important for new businesses entering the app development space to comprehend the importance of storage.

Storage offers the tools needed to effectively manage, save, and retrieve data; it is the backbone of any application. A well-thought-out and reliable storage solution can make a big difference in an application's performance, scalability, and functionality.

Types of Storage Options

Relational databases: This is used for structured data with well-defined relationships, such as customer information or product catalogs. Examples include MySQL, PostgreSQL, and Oracle.
NoSQL databases: Suitable for unstructured or semi-structured data, such as JSON or XML documents. Examples include MongoDB, Cassandra, and Redis.
Object storage: Designed for storing large amounts of unstructured data, such as images, videos, and documents. Examples include Amazon S3, Google Cloud Storage, and Azure Blob Storage.
File storage: This is primarily used for storing files, such as documents, images, and audio files. Examples include NFS and SMB.
Hybrid storage approaches: This involves combining multiple storage solutions to meet specific requirements, such as using a relational database for transactional data and object storage for large media files.

Importance of Storage in App Development

Data Persistence: Storage guarantees that information is kept safe even after an app is closed or the device is restarted, giving consumers access to their data whenever they choose.
Scalability: With a scalable storage system, an application can increase and change over time in response to rising data volumes and user loads.
Performance: An app speed may be greatly enhanced by effective storage management, which also guarantees a seamless user experience by cutting down on loading times.
Data Security: Sensitive user data is protected against breaches and unwanted access with the aid of appropriate storage procedures, such as encryption and access controls.
Integration with Other Systems: To promote data exchange and interoperability, storage solutions can be connected with other systems, including databases, cloud computing platforms, and external services.

Step-by-Step Guide to Creating a Storage Account for a new Company App

Assuming a company is designing and developing a new app. The developers wants to ensure that storage is only accessed using keys and managed identities. They also want to use role-based access control. To help with testing, protected immutable storage is needed. A step-by-step guide on how to achieve this is illustrated as follows;

Step 1: Create the storage account and managed identity

Provide a storage account for the web app

In the Azure portal, search for and select Storage accounts.

Select + Create.

For Resource group select Create new. Give your resource group a name and select OK to save your changes.
Provide a Storage account name. Ensure the name is unique and meets the naming requirements.

Move to the Encryption tab.
Check the box for Enable infrastructure encryption.
Notice the warning, This option cannot be changed after this storage account is created.
Select Review + Create.
Wait for the resource to deploy.

Provide a managed identity for the web app to use.

Search for and select Managed identities.

Select Create.

Select your resource group.

Give your managed identity a name.
Select Review and create, and then Create.

Assign the correct permissions to the managed identity. The identity only needs to read and list containers and blobs.

Search for and select your storage account.
Select the Access Control (IAM) blade.
Select Add role assignment (center of the page).

On the Job functions roles page.

Search for and select the Storage Blob Data Reader role.

On the Members page, select Managed identity.

Select Select members, in the Managed identity drop-down select User-assigned managed identity.
Select the managed identity you created in the previous step.
Click Select and then Review + assign the role.

Select Review + assign a second time to add the role assignment.

Your storage account can now be accessed by a managed identity with the Storage Data Blob Reader permissions.

Step 2: Secure access to the storage account with a key vault and key.

To create the key vault and key needed for this part of the lab, your user account must have Key Vault Administrator permissions.

In the portal, search for and select Resource groups.
Select your resource group, and then the Access Control (IAM) blade.
Select Add role assignment (center of the page).

On the Job functions roles page, search for and select the Key Vault Administrator role.

On the Members page, select User, group, or service principal.

Select Select members.
Search for and select your user account. Your user account is shown in the top right of the portal.
Click Select and then Review + assign.

Select Review + assign a second time to add the role assignment.

You are now ready to continue with the lab.

Create a key vault to store the access keys.

In the portal, search for and select Key vaults.

Select Create.

Select your resource group.

Provide the name for the key vault. The name must be unique.

Ensure on the Access configuration tab that Azure role-based access control (recommended) is selected.
Select Review + create.

Wait for the validation checks to complete and then select Create.

After the deployment, select Go to resource.

On the Overview blade ensure both Soft-delete and Purge protection are enabled.

Create a customer-managed key in the key vault.

In your key vault, in the Objects section, select the Keys blade.
Select Generate/Import.

Name the key. Take the defaults for the rest of the parameters, and Create the key.

Step 3: Configure the storage account to use the customer managed key in the key vault

Before you can complete the next steps, you must assign the Key Vault Crypto Service Encryption User role to the managed identity.

In the portal, search for and select Resource groups.
Select your resource group, and then the Access Control (IAM) blade.
Select Add role assignment (center of the page).

On the Job functions roles page, search for and select the Key Vault Crypto Service Encryption User role.

On the Members page, select Managed identity.

Select Select members, in the Managed identity drop-down select User-assigned managed identity.
Select your managed identity.

Click Select and then Review + assign.

Select Review + assign a second time to add the role assignment.

Configure the storage account to use the customer managed key in your key vault.

Return to your the storage account.
In the Security + networking section, select the Encryption blade.
Select Customer-managed keys.

Select a key vault and key. Select your key vault and key.
Select to confirm your choices.

Ensure the Identity type is User-assigned.

Select an identity.
Select your managed identity then select Add.

Save your changes.

If you receive an error that your identity does not have the correct permissions, wait a minute and try again.

Step 4: Configure a time-based retention policy and an encryption scope.

The developers require a storage container where files can’t be modified, even by the administrator.

Navigate to your storage account.
In the Data storage section, select the Containers blade.

Create a container called hold. Take the defaults. Be sure to Create the container.

Upload a file to the container.

In the Settings section, select the Access policy blade.
In the Immutable blob storage section, select + Add policy.

For the Policy type, select time-based retention.
Set the Retention period to 5 days.
Be sure to Save your changes.

Try to delete the file in the container.
Verify you are notified failed to delete blobs due to policy.

The developers require an encryption scope that enables infrastructure encryption.

Navigate back to your storage account.
In the Security + networking blade, select Encryption.
In the Encryption scopes tab, select Add.

Give your encryption scope a name.
The Encryption type is Microsoft-managed key.
Set Infrastructure encryption to Enable.
Create the encryption scope.

Return to your storage account and create a new container.
Notice on the New container page, there is the Name and Public access level.
Notice in the Advanced section you can select the Encryption scope you created and apply it to all blobs in the container.

Conclusion

In conclusion, the cost-effectiveness, scalability, and performance of a new company app will all be greatly impacted by the storage solution you choose. You may determine which storage option is best for you by carefully assessing your needs, including data volume, access patterns, data sensitivity, and financial limits.

Don't forget to like, comment, share and subscribe!

How to Create Virtual Machines: A Step-by-Step Guide

Onyemachi Doris — Fri, 27 Sep 2024 19:25:54 +0000

Introduction to Virtual Machines
Benefits of Using Virtual Machines
Step-by-Step Guide to Creating a Virtual Machine in Azure
Conclusion

Introduction to Virtual Machines

A virtual machine (VM) is a computer system that is imitated and runs on top of a physical machine (the host). They allow you to run multiple operating systems (guests) on a single physical server.

Benefits of Using Virtual Machines

Numerous industries, including IT, development, and businesses can benefit greatly from using virtual machines (VMs). Some of these benefits include:

1. Efficient Resource Utilization
Virtual machines (VMs) make maximum use of the hardware resources, such as CPU, memory, and storage, on a single physical server by enabling the simultaneous operation of several operating systems and applications. With the use of virtual machines, multiple workloads can be operated on fewer physical servers which lowers the cost of hardware, power consumption, cooling requirements, and physical space in data centers.

2. Isolation and Security
Every virtual machine functions independently of the others, so if one fails or is compromised, it has no effect on the host system or the other VMs. Because of their isolation, virtual machines (VMs) are perfect for testing or executing potentially dangerous software without impacting production environments. They can also be used to create sandboxed environments where malware or vulnerabilities are contained. This thereby reduces security risks to the overall system.

3. Easy Backup, Cloning, and Recovery
VMs provides easy backup because it allows you to take snapshots of the system state at any point in time. If for an example, an update or configuration change causes problems, you can easily revert to the snapshot without data loss. Quick cloning of virtual machines (VMs) facilitates the deployment of identical systems for testing, development, and production.

Step-by-Step Guide to Creating a Virtual Machine in Azure

1️⃣ Create a Free Trial Account
To Do: Create a free trial account in Azure. This provides a subscription and $200 Azure credits.

2️⃣ Login to Azure Account
To Do: Go to portal.azure.com and log in with your credentials (username and password).

3️⃣ Search for Virtual Machines
To Do: In the “Search resources, services and docs” field, type “virtual machines”. You can also find it by clicking on the hamburger icon and scrolling through the options or by clicking on the “Create a resource” button and typing “virtual machine”.

4️⃣ Select Virtual Machine
To Do: From the list of search results, click on the “Virtual machine” option. The best option is usually highlighted.

5️⃣ Start the Creation Process
To Do: Click the “Create” button to start the virtual machine creation process. Choose “Create a virtual machine hosted by Azure”.

6️⃣ Enter Project Details
To Do: Select the appropriate subscription and create a resource group by clicking the “Create resource group” button and giving it a name. Also provide a name for your virtual machine.

7️⃣ Enter Virtual Machine Details
To Do: Provide information about your virtual machine, such as the operating system (choose either Ubuntu Server 20.04 or Windows Server Datacenter -x64 G2), size, and other configuration settings. Leave other options as default.

8️⃣ Create an Administrator Account
To Do: Choose “Password” for the authentication type. Use “Azureuser” for the username and “Password1234” for the password.

9️⃣ Select Inbound Port Rules
To Do: Select SSH if you chose a Linux VM and RDP if it’s a Windows VM. This allows IP addresses to connect to the VM.

🔟 Check Licensing
To Do: By default, this is unchecked. Click the box to check it.

1️⃣1️⃣ Disable Boot Diagnostics
To Do: Click “Next” until you reach the “Boot diagnostics” in the Monitoring tab, and click on “Disable”.

1️⃣2️⃣ Review and Create
To Do: Click on the “Review + Create” button. If the validation passes, the deployment will proceed. If not, note any recommendations, fix them, and try again. Deployment might take 3-5 minutes.

1️⃣3️⃣ Check the Status
To Do: If the VM is running, the task has succeeded. Then, click on "Go to Resource".

1️⃣4️⃣ Access the Virtual Machine
To Do: Once the virtual machine is deployed, click on the “Connect” button in the virtual machine blade in the Azure portal.

1️⃣5️⃣ Download RDP File
To Do: Click “Native RDP”, select, and wait for the configured sign to be displayed on the right-hand side. Download the RDP file.

1️⃣6️⃣ Connect to the VM
To Do: Open the RDP file from your local computer and click on “Connect”. Enter the admin details created during the VM setup.

1️⃣7️⃣ Follow the Prompt
To Do: Follow the prompt and click “Continue”. Use the username and password created for the admin section.

1️⃣8️⃣ Wait for Configuration
To Do: Wait for the remote PC to be configured.

1️⃣9️⃣ Start Using the VM
To Do: Once the connection is successful, start using your virtual machine!

Conclusion

Creating and managing virtual machines is a crucial skill for system administrators, developers, and IT professionals. It provides flexibility, efficiency, and scalability for both testing and production environments.

Don't forget to like, comment, share and subscribe!

How to Create a Shared File Storage Account for Company Offices

Onyemachi Doris — Wed, 25 Sep 2024 21:39:34 +0000

Introduction
Types of Shared Files Storage Solutions
Guidelines to Creating a Shared Files Storage Account in Azure
Conclusion

Introduction

In today's digital world, shared file storage is a crucial tool for businesses as it facilitates easy collaboration and effective data management. Having dependable, safe, and easily accessible storage is essential to sustaining business productivity, whether it is used for team projects, company documents, or shared resources.

Types of Shared Files Storage Solutions

There are three primary types of storage solutions businesses can adopt to provide shared file storage. They are cloud-based, on-premises, and hybrid models.

Cloud-Based Storage
Cloud-based storage is increasingly popular due to its scalability and ease of access. With cloud storage services like Dropbox, Google Drive, and Microsoft OneDrive, users may store files on remote servers and retrieve them from any location with an internet connection.

On-Premises Storage
On-premises storage refers to physical hardware that is kept within the organization's infrastructure, such as Storage Area Networks (SAN) or Network Attached Storage (NAS). Although it can demand a large amount of IT resources, this strategy gives total control over data.

Hybrid Storage
Hybrid storage offers the advantages of both on-premises and cloud systems. Here, data can be stored on-premises for sensitive files and in the cloud for scalability and easy access.

Guidelines to Creating a Shared Files Storage Account in Azure

Assuming a company is geographically dispersed with offices in different locations. Of course they will need a way to share files and disseminate information. For example, the Finance department needs to confirm cost information for auditing and compliance. This file shares should be easy to access and load without delay and some content should only be accessed from selected corporate virtual networks. The guidelines of how to achieve this is explained as follows;

Step 1: Create and configure a storage account for Azure Files.

Create a storage account for the finance department’s shared files.

In the Azure portal, search for and select Storage accounts.

Select + Create.

For Resource group select Create new. Give your resource group a name and select OK to save your changes.
Provide a Storage account name. Ensure the name meets the naming requirements.

Set the Performance to Premium.
Set the Premium account type to File shares.
Set the Redundancy to Zone-redundant storage. You might want to look at the meaning of Zone-redundant storage in my previous article.
Select Review and then Create the storage account.

Wait for the resource to deploy.
Select Go to resource.

Step 2: Create and configure a file share with directory.

Create a file share for the corporate office.

In the storage account, in the Data storage section, select the File shares blade.
Select + File share and provide a Name.

Review the other options, but take the defaults.
Select Create

Add a directory to the file share for the finance department. For future testing, upload a file.

Select your file share and select + Add directory.

Name the new directory finance.

Select Browse and then select the finance directory.
Notice you can Add directory to further organize your file share.

Upload a file of your choosing.

Step 3: Configure and test snapshots.

Similar to blob storage, you need to protect against accidental deletion of files. You can use Snapshots to achieve this.

Select your file share.
In the Operations section, select the Snapshots blade.
Select + Add snapshot. The comment is optional. Select OK.

Select your snapshot and verify your file directory and uploaded file are included.

Practice using snapshots to restore a file.

Return to your file share.
Browse to your file directory.
Locate your uploaded file and in the Properties pane select Delete. Select Yes to confirm the deletion.

Select the Snapshots blade and then select your snapshot.

Navigate to the file you want to restore.
Select the file and the select Restore.

Provide a Restored file name.

Verify your file directory has the restored file.

Step 4: Configure restricting storage access to selected virtual networks.

This tasks in this section require a virtual network with subnet. In a production environment these resources would already be created.

Search for and select Virtual networks.

Select Create.

Select your resource group. and give the virtual network a name.

Take the defaults for other parameters, select Review + create, and then Create.

Wait for the resource to deploy.
Select Go to resource.

In the Settings section, select the Subnets blade.
Select the default subnet.

In the Service endpoints section choose Microsoft.Storage ** in the **Services drop-down.
Do not make any other changes.
Be sure to Save your changes.

The storage account should only be accessed from the virtual network you just created.

Return to your files storage account.
In the Security + networking section, select the Networking blade.
Change the Public network access to Enabled from selected virtual networks and IP addresses.
In the Virtual networks section, select Add existing virtual network.
Select your virtual network and subnet, select Add.
Be sure to Save your changes.

Select the Storage browser and navigate to your file share.
Verify the message not authorized to perform this operation. You are not connecting from the virtual network.

Conclusion

Modern company operations depend on the provision of safe, easily accessible, and well-managed shared file storage. It's important to evaluate your organization's needs, set up proper infrastructure, and apply best practices for security and administration regardless of whether you choose a cloud-based, on-premises, or hybrid storage solution. A shared file storage account can improve productivity and collaboration in an organisation while protecting their valuable data if used properly.

Don't forget to like, comment, share and subscribe!

Providing Private Storage for Internal Company Documents using Microsoft Azure

Onyemachi Doris — Tue, 24 Sep 2024 22:15:23 +0000

Introduction
Features of a Private Storage Account
Benefits of Private Storage Accounts
Use Cases for Private Storage
Azure Storage Redundancy Options
Azure Storage Access Tiers
Step-by-Step Guide to Creating a Private Storage Account
Conclusion

Introduction

A private storage account is a storage account that is only accessible through private endpoints within a Virtual Network (VNet), protecting it from public network access. This method adds an extra degree of security by guaranteeing that your storage resources such as blobs, files, tables, or queues are separated from the public internet.

Features of a Private Storage Account

Private Endpoint Integration: A private storage account's connection with private endpoints is one of its primary features. Private Endpoints give the storage account a private IP address from the virtual network, limiting access to that address exclusively. All communication between the storage account and the client (or application) is kept completely inside Azure's secure backbone network, keeping it hidden from the general public.

Public Access Restriction: Access to the public network is completely disabled. The private endpoint or the VNet is used for all storage account access. No public IP addresses are associated with the account which enhances security and minimizes attack surfaces.

Enhanced Security and Compliance: By guaranteeing that data never passes across public networks, private endpoints allow you to comply with stringent regulatory and compliance standards. Additionally, security measures such as encryption, Azure Active Directory (AAD) integration, and role-based access control (RBAC) further secures the data.

Network Security: You can configure the storage account to allow access only from specific subnets or through network security groups (NSGs) for further control over inbound and outbound traffic. Azure Firewall or third-party security appliances can also be integrated into the VNet for enhanced threat protection.

Benefits of Using Private Storage Accounts

Data Isolation: The hazards associated with public access are eliminated because data can only be accessed from within the private VNet or designated IP ranges.

Reduced Attack Surface: Since the storage account does not have a public endpoint, it reduces the potential attack vectors, especially from internet-based threats.

Compliance: Private storage accounts ensure that sensitive data is only available through private networks, helping to comply with a variety of industrial laws that need restricted data access.

VNet Integration: Building safe hybrid architectures with deep VNets integration enables on-premises systems to safely access Azure storage resources over VPN or ExpressRoute connections.

Some Use Cases for Private Storage Accounts

Enterprise Applications with Sensitive Data: Assuming an organization needs to store confidential business data (e.g., financial records, internal documents) securely and restrict access to its virtual network. A private storage account will help to achieve this because it ensures that sensitive data is isolated from public access and only available within the organization's network, reducing exposure to external threats.

Hybrid Cloud Architecture: For example, if a company with on-premises infrastructure wants to extend its storage capabilities into Azure for better scalability while maintaining secure access to the cloud from on-premises systems. They can use private storage accounts with Azure VPN or ExpressRoute to seamlessly extend its data storage to the cloud without exposing it to the public internet.

Secure Backup and Disaster Recovery: If a business needs a reliable and secure cloud backup solution that ensures their critical backups (e.g., database backups, application data) remain inaccessible to unauthorized use. By storing backups in a private storage account, the data is securely isolated from public networks, reducing the risk of data breaches. It also provides peace of mind for disaster recovery scenarios.

Azure Storage Redundancy Options

Azure Storage accounts offer several redundancy options to ensure durability, availability, and disaster recovery. They are;

Locally Redundant Storage (LRS): This replicates data three times within a single data center in one region. It provides high durability but no cross-region replication.

Zone-Redundant Storage (ZRS): The zone-redundant storage replicates data synchronously across three different Azure availability zones within a single region, providing high availability in case of zone failures.

Geo-Redundant Storage (GRS): Geo-redundant storage replicates data across two geographically separate regions, providing durability even in the event of a regional outage. It replicates data three times within the primary region and then asynchronously to a secondary region.

Geo-Zone Redundant Storage (GZRS): Combines the advantages of ZRS and GRS by replicating data synchronously across zones in the primary region and asynchronously to another region for additional redundancy.

Azure Storage Access Tiers

Azure Blob Storage supports different access tiers to optimize storage costs based on how frequently the data is accessed. They include;

Hot Tier: The hot tier is optimized for data that is accessed frequently. It has higher storage costs but lower access costs.

Cool Tier: This is best suited for infrequently accessed data, such as backups or older data. It has lower storage costs but higher access costs compared to the Hot tier.

Archive Tier: This tier is ideal for data that is rarely accessed and can tolerate high latency for retrieval (hours). It has the lowest storage costs, but access requires a rehydration process.

Step-by-Step Guide to Creating a Private Storage Account

Assuming a company needs storage with high availability for their offices and departments. This content is private to the company and shouldn’t be shared without consent. Additionally, the company wants to use this storage account to back up their public website. A step-by-step guideline of how to achieve this is illustrated as follows;

Step 1: Create a storage account for the internal private company documents and configure high availability.

In the Azure portal, search for and select Storage accounts.

Select + Create.

Select the Resource group created in the previous lab (refer to my previous post).
Set the Storage account name to private. Add an identifier to the name to ensure the name is unique.
Select Review, and then Create the storage account.

Wait for the storage account to deploy, and then select Go to resource.

Because this storage account requires high availability in case there’s a regional outage, read access in the secondary region is not required. The appropriate level of redundancy is configured below.

In the storage account, in the Data management section, select the Redundancy blade.
Ensure Geo-redundant storage (GRS) is selected.
Refresh the page.
Review the primary and secondary location information.
Save your changes.

Step 2: Create a storage container, upload a file, and restrict access to the file.

Create a private storage container for the corporate data.

In the storage account, in the Data storage section, select the Containers blade.
Select + Container.

Ensure the Name of the container is private.
Ensure the Public access level is Private (no anonymous access).
As you have time, review the Advanced settings, but take the defaults.
Select Create.

For testing, upload a file to the private container. The type of file doesn’t matter. A small image or text file is a good choice. Test to ensure the file isn’t publicly accessible.

Select the container.

Select Upload.

Browse to files and select a file.
Upload the file.

Select the uploaded file.
On the Overview tab, copy the URL.

Paste the URL into a new browser tab.
Verify the file doesn’t display and you receive an error.

An external partner requires read and write access to the file for at least the next 24 hours. Configure and test a shared access signature (SAS).

Select your uploaded blob file and move to the Generate SAS tab.

In the Permissions drop-down, ensure the partner has only Read permissions.
Verify the Start and expiry date/time is for the next 24 hours.

Select Generate SAS token and URL.
Copy the Blob SAS URL to a new browser tab.

Verify you can access the file. If you have uploaded an image file it will display in the browser. Other file types will be downloaded.

Step 3: Configure Storage Access Tiers and Content Replication.

To save on costs, after 30 days, move blobs from the hot tier to the cool tier.

Return to the storage account.
In the Overview section, notice the Default access tier is set to Hot.

In the Data management section, select the Lifecycle management blade.
Select Add rule.

Set the Rule name to movetocool.
Set the Rule scope to Apply rule to all blobs in the storage account.
Select Next.

Ensure Last modified is selected.
Set More than (days ago) to 30.
In the Then drop-down select Move to cool storage.
As you have time, review other lifecycle options in the drop-down.
Add the rule.

The public website files need to be backed up to another storage account.

In your storage account, create a new container called backup.
Use the default values. Refer back to the previous post if you need detailed instructions.

Navigate to your publicwebsite storage account. This storage account was created in the previous post.
In the Data management section, select the Object replication blade.
Select Create replication rules.

Set the Destination storage account to the private storage account.
Set the Source container to public and the Destination container to backup.

Create the replication rule.

Optionally, as you have time, upload a file to the public container. Return to the private storage account and refresh the backup container. Within a few minutes your public website file will appear in the backup folder.

Conclusion

Private storage accounts provide the ideal solution for businesses and organizations that need to ensure secure and private access to their data. It delivers improved security, compliance, and control over data while utilizing the scalability and flexibility of Azure cloud storage.

Don't forget to like, comment, share and subscribe!

How to Provide Storage for a Public Website in Azure

Onyemachi Doris — Sat, 14 Sep 2024 17:06:31 +0000

Introduction
Key Storage Options in Azure
What is a Public Website?
Step-by-step guide on how to provide storage for a public website in Azure
Conclusion

Introduction

Azure provides a wide range of storage options to suit different website requirements from small personal blogs to large-scale enterprise applications. In my previous post, I have provided a clear explanation of the meaning of an Azure storage account and its uses.

Key Storage Options in Azure

The storage options provided by Azure include:
Azure Blob Storage: This is deal for storing unstructured data like images, videos, and documents. It offers scalability, durability, and performance.
Azure Files: Provides file shares that can be accessed by multiple applications and servers, making it suitable for shared data storage.
Azure Disk: Offers highly performant block-level storage for virtual machines, perfect for applications requiring low latency and high I/O.
Azure Cosmos DB: A fully managed NoSQL (Not Only SQL) database that can be used to store and query structured and semi-structured data.

What is a Public Website?

A public website is one that anyone can access online without needing a password or special permission. It's open to the general public and can be viewed by anyone with an internet connection.

Examples of public websites include:
News websites: Like BBC News, CNN, or The Guardian
E-commerce websites: Like Amazon, eBay, or Walmart
Social media platforms: Like Facebook, Twitter, or Instagram
Government websites: Like the White House, the UK Government, or the European Union
Personal blogs: Like personal websites or portfolios

Step-by-Step Guide on How to Provide Storage for a Public Website in Azure

Step 1. Create a storage account with high availability to support the public website.

In the Azure portal, search for and select Storage accounts.

Select + Create.

For resource group select new. Give your resource group a name and select OK.
Set the Storage account name to publicwebsite. Make sure the storage account name is unique by adding an identifier.
Take the defaults for other settings.
Select Review and then Create.

Wait for the storage account to deploy, and then select Go to resource.

This storage requires high availability if there’s a regional outage. Additionally, enable read access to the secondary region, Learn more about storage account redundancy.

In the storage account, in the Data management section, select the Redundancy blade.
Ensure Read-access Geo-redundant storage is selected.

Review the primary and secondary location information.

Information on the public website should be accessible without requiring customers to login.

In the storage account, in the Settings section, select the Configuration blade.
Ensure the Allow blob anonymous access setting is Enabled.
Be sure to Save your changes.

Step 2: Create a blob storage container with anonymous read access
The public website has various images and documents. Create a blob storage container for the content.

In your storage account, in the Data storage section, select the Containers blade.
Select + Container.

Ensure the Name of the container is public.
Select Create.

Customers should be able to view the images without being authenticated. Configure anonymous read access for the public container blobs.

Select your public container.
On the Overview blade, select Change access level.
Ensure the Public access level is Blob (anonymous read access for blobs only).
Select OK.

Step 3: Practice uploading files and testing access.
For testing, upload a file to the public container. The type of file doesn’t matter. A small image or text file is a good choice.

Ensure you are viewing your container.
Select Upload.
Browse to files and select a file. Browse to a file of your choice.
Select Upload.

Close the upload window, Refresh the page and ensure your file was uploaded.

Determine the URL for your uploaded file. Open a browser and test the URL.

Select your uploaded file.
On the Overview tab, copy the URL.
Paste the URL into a new browser tab.

If you have uploaded an image file it will display in the browser. Other file types should be downloaded.

Step 4: Configure soft delete
It’s important that the website documents can be restored if they’re deleted. Configure blob soft delete for 21 days.

Go to the Overview blade of the storage account.
On the Properties page, locate the Blob service section.

Select the Blob soft delete setting.
Ensure the Enable soft delete for blobs is checked.
Change the Keep deleted blobs for (in days setting is 21.
Notice you can also Enable soft delete for containers.
Don’t forget to Save your changes.

If something gets deleted, you need to practice using soft delete to restore the files.

Navigate to your container where you uploaded a file.
Select the file you uploaded and then select Delete.
Select OK to confirm deleting the file.

On the container Overview page, toggle the slider Show deleted blobs. This toggle is to the right of the search box.

Select your deleted file, and use the ellipses on the far right, to Undelete the file.
Refresh the container and confirm the file has been restored.

Step 5: Configure blob versioning
It’s important to keep track of the different website product document versions.

Go to the Overview blade of the storage account.
In the Properties section, locate the Blob service section.
Select the Versioning setting.

Ensure the Enable versioning for blobs checkbox is checked.
Notice your options to keep all versions or delete versions after.
Don’t forget to Save your changes.

As you have time, experiment with restoring previous blob versions.

Upload another version of your container file. This overwrites your existing file.
Your previous file version is listed on Show deleted blobs page.

Conclusion

By carefully choosing the right Azure storage solution for your website and taking advantage of its scalability and reliability, you can ensure a smooth and efficient user experience.

Don't forget to like, comment, share and subscribe!

Maximize Your IT Efficiency with Easy-to-Configure Azure Storage Settings

Onyemachi Doris — Sat, 14 Sep 2024 12:31:33 +0000

Introduction to IT Efficiency
What is Azure Storage?
Key features of Azure Storage
Common use cases for Azure Storage
Step-by-Step Guide to Creating and Configuring Azure Storage Settings
Conclusion

Introduction to IT Efficiency

In today's interconnected world, technology is essential for businesses. It helps them work more efficiently and discover new ways to grow. But to get the most out of technology, companies need to plan carefully. They should use their resources wisely, simplify their processes, and improve their overall performance.

IT efficiency is not merely a buzzword; it's a critical factor that can differentiate businesses from their competitors. By improving their technology systems, companies can save money, work faster, and make better choices. A well-managed technology environment can also encourage new ideas and flexibility, helping businesses adjust to changing markets.

What is Azure Storage?

Azure Storage is simply a cloud storage solution provided by Microsoft. It offers highly available, scalable, and secure storage for various types of data, including files, images, videos, and databases.

Key features of Azure Storage

Scalability: It can handle massive amounts of data and can easily scale up or down to meet your needs.
Durability:Your data is stored across multiple data centers for redundancy and protection against data loss.
Security: Azure Storage provides robust security measures to protect your data from unauthorized access.
Performance: It offers high performance and low latency for accessing your data.
Flexibility: Azure Storage offers various storage options to suit different use cases, such as blob storage, file storage, table storage, and queue storage.

Common Use Cases for Azure Storage
Storing media files: Images, videos, and audio files can be stored and easily accessed from Azure Storage.
Backing up data: Azure Storage can be used to backup data from on-premises systems or other cloud services.
Archiving data: Old or infrequently accessed data can be archived in Azure Storage for long-term retention.
Building applications: Developers can use Azure Storage to store data for their applications and access it from anywhere in the world.
Analysing data: Azure Storage can be used to store large datasets for analysis and machine learning purposes.

Step-by-Step Guide to Creating and Configuring Azure Storage Settings

Assuming an IT Department needs to prototype different storage scenarios and to train new personnel but the content isn’t important enough to be backed up and doesn’t need to be restored if the data is overwritten or removed, a simple configuration setting which can easily be changed is required. A step-by-step guide on how to do achieve this is illustrated below.

Step 1: Create a Resource Group and Storage Account

Create and deploy a resource group to hold all your project resources.

Some of us might be wondering what a resource group is. A resource group is a logical container that holds related resources for an Azure solution. Think of it as a folder or a grouping of resources that share a common lifecycle or purpose. This means you can manage and deploy these resources together, making it easier to control and organize your Azure environment.

In the Azure portal, search for and select Resource groups.

Select + Create.

Give your resource group a name. For example, storagerg.
Select a region. Use this region throughout the project.
Select Review and create to validate the resource group.

And finally select Create to deploy the resource group.

Next, create and deploy a storage account to support testing and training.

In the Azure portal, search for and select Storage accounts.

Select + Create.

On the Basics tab, select your Resource group.
Provide a Storage account name. The storage account name must be unique in Azure.
Set the Performance to Standard.
Select Review, and then Create.

Wait for the storage account to deploy and then Go to resource.

Step 2: Configure Simple Settings in the Storage Account.

The data in this storage account doesn’t require high availability or durability. A lowest cost storage solution is desired.

In your storage account, in the Data management section, select the Redundancy blade.
Select Locally-redundant storage (LRS) in the Redundancy drop-down.
Be sure to Save your changes.

Refresh the page and notice the content only exists in the primary location.

The storage account should only accept requests from secure connections.

In the Settings section, select the Configuration blade.
Ensure Secure transfer required is Enabled.

Developers would like the storage account to use at least TLS (transport layer security) version 1.2.

In the Settings section, select the Configuration blade.
Ensure the Minimal TLS version is set to Version 1.2.

Until the storage is needed again, disable requests to the storage account.

In the Settings section, select the Configuration blade.
Ensure Allow storage account key access is Disabled.
Be sure to Save your changes.

Ensure the storage account allows public access from all networks.

In the Security + networking section, select the Networking blade.
Ensure Public network access is set to Enabled from all networks.
Be sure to Save your changes.

Conclusion

Azure Storage is a strong and flexible tool that helps businesses improve their technology. It's easy to use and can make companies work better, handle data better, and achieve better results overall.

DEV Community: Onyemachi Doris

Getting Started with Azure VM Scale Sets: Concepts and Deployment Guide

How to Create a VM Running a Web Server on Ubuntu

Deploying an Azure Web App: A Step-by-Step Guide

Introduction

Understanding Key Concepts in Cloud Computing

Introduction

How to Create a Linux VM using Custom Templates

Table of Contents

Introduction

What is a Linux Virtual Machine?

What are Custom VM Templates?

Advantages of Using Templates over Manual Configuration

Steps on how to create a Linux VM using custom templates

How to stop the VM

Conclusion

Providing Storage for a New Company App

Table of Contents

Introduction

Types of Storage Options

Importance of Storage in App Development

Step-by-Step Guide to Creating a Storage Account for a new Company App

Conclusion

How to Create Virtual Machines: A Step-by-Step Guide

Table of Contents

Introduction to Virtual Machines

Benefits of Using Virtual Machines

Step-by-Step Guide to Creating a Virtual Machine in Azure

Conclusion

How to Create a Shared File Storage Account for Company Offices

Table of Contents

Introduction

Types of Shared Files Storage Solutions

Guidelines to Creating a Shared Files Storage Account in Azure

Conclusion

Providing Private Storage for Internal Company Documents using Microsoft Azure

Table of Contents

Introduction

Features of a Private Storage Account

Benefits of Using Private Storage Accounts

Some Use Cases for Private Storage Accounts

Azure Storage Redundancy Options

Azure Storage Access Tiers

Step-by-Step Guide to Creating a Private Storage Account

Conclusion

How to Provide Storage for a Public Website in Azure

Table of Contents

Introduction

Key Storage Options in Azure

What is a Public Website?

Step-by-Step Guide on How to Provide Storage for a Public Website in Azure

Conclusion

Maximize Your IT Efficiency with Easy-to-Configure Azure Storage Settings

Table of Contents

Introduction to IT Efficiency

What is Azure Storage?

Key features of Azure Storage

Common Use Cases for Azure Storage

Step-by-Step Guide to Creating and Configuring Azure Storage Settings

Step 1: Create a Resource Group and Storage Account

Create and deploy a resource group to hold all your project resources.

Next, create and deploy a storage account to support testing and training.

Step 2: Configure Simple Settings in the Storage Account.

The data in this storage account doesn’t require high availability or durability. A lowest cost storage solution is desired.

The storage account should only accept requests from secure connections.

Developers would like the storage account to use at least TLS (transport layer security) version 1.2.

Until the storage is needed again, disable requests to the storage account.

Ensure the storage account allows public access from all networks.

Conclusion

"Don't forget to like, comment, share, and subscribe!"