Provide Storage for the IT department Testing and Training.

What is Azure Storage.

Azure Storage is a cloud-based service offered by Microsoft Azure that provides scalable, durable, and secure storage solutions. It supports a variety of data storage needs, including:

1. Blob Storage: For storing large amounts of unstructured data, such as text, images, videos, and backups. Blobs are organized into containers within storage accounts.
2. File Storage: Managed file shares that can be accessed via the Server Message Block (SMB) protocol. This is useful for scenarios where you need a file system with shared access across multiple machines.
3. Queue Storage: Provides reliable messaging between applications or components, facilitating communication and workflow management.
4. Table Storage: A NoSQL key-value store that allows for quick and scalable storage of structured data, such as application metadata, user data, and other datasets.
5. Disk Storage: Virtual hard disks (VHDs) used with Azure Virtual Machines. These disks come in different performance tiers, such as Standard HDD, Standard SSD, and Premium SSD.
6. Azure Data Lake Storage: Optimized for big data analytics, it provides hierarchical namespace and fine-grained access control. It integrates well with Azure analytics services. Azure Storage is designed to be highly available and resilient, offering features like data replication across regions, encryption, and access control. It’s used in a wide range of scenarios from web and mobile applications to big data analytics and backup solutions.

Here are the steps to accomplish the task of providing a Storage account for IT department:
Step1.
Create a resource group and a storage account.

• In the Azure portal, search for and select Resource groups.

• Click Plus Create.

• Give your resource group a name. For example, storagerg.

• Select a region. Use this region throughout the project.

• Select Review and create to validate the resource group.

• Select Create to deploy the resource group.

Step2. Create and deploy a storage account to support testing and training.

• In the Azure portal, search for and select Storage accounts.

• Select Plus Create

• On the Basics tab, select your Resource group.

• Provide a Storage account name. The storage account name must be unique in Azure.

• Set the Performance to Standard.

• Select Review, and then Create.

• Go to resource.

**Configure simple settings in the storage account.

**

• In your storage account, in the Data management section, select the Redundancy blade.

• Select Locally-redundant storage (LRS) in the Redundancy drop-down.

• Be sure to save the changes

Step2. The storage account should only accept requests from secure connections.

• In the Settings section, select the Configuration blade.

• Ensure Secure transfer required is Enabled.

Step3. Developers would like the storage account to use at least TLS version 1.2.

• In the Settings section, select the Configuration blade.

• Ensure the Minimal TLS version is set to Version 1.2

Step4. Until the storage is needed again, disable requests to the storage account

• In the Settings section, select the Configuration blade

• Ensure Allow storage account key access is Disabled

• Be sure to Save your changes.

Step5. Ensure the storage account allows public access from all networks.

• In the Security + networking section, select the Networking blade.

• Ensure Public network access is set to Enabled from all networks.

• Save Changes.

Here are the steps required to Provide storage for the public website

Step1. Create a storage account to support the public website.

• In the portal, search for and select Storage accounts.

• Select Plus Create

• For resource group select new. Give your resource group a name and select OK.

• Set the Storage account name to publicwebsite. Make sure the storage account name is unique by adding an identifier.

• Select Review and then Create.

• Wait for the storage account to deploy, and then select Go to resource.

Step2. This storage requires high availability if there’s a regional outage. Additionally, enable read access to the secondary region

• In the storage account, in the Data management section, select the Redundancy blade.

• Ensure Read-access Geo-redundant storage is selected.

• Review the primary and secondary location information.

Step3. Information on the public website should be accessible without requiring customers to login.

• In the storage account, in the Settings section, select the Configuration blade.

• Ensure the Allow blob anonymous access setting is Enabled.

• Be sure to Save your changes.

**Create a blob storage container with anonymous read access

**
Step1. The public website has various images and documents. Create a blob storage container for the content

• In your storage account, in the Data storage section, select the Containers blade.

• Ensure the Name of the container is public.

• Select Create.

Step2. Customers should be able to view the images without being authenticated. Configure anonymous read access for the public container blobs.

• Select your public container.

• On the Overview blade, select Change access level.

• Ensure the Public access level is Blob (anonymous read access for blobs only).

Practice uploading files and testing access.

• For testing, upload a file to the public container. The type of file doesn’t matter. Step1. Testing upload.

Step 2

• Determine the URL for your uploaded file. Open a browser and test the URL

• Configure soft delete

• How to use soft delete to restore files.

• How to configure blob versioning. Go to the Overview blade of the storage account. In the Properties section, locate the Blob service section. Select the Versioning setting. Ensure the Enable versioning for blobs checkbox is checked. Notice your options to keep all versions or delete versions after. Don’t forget to Save your changes.

**_Create a storage account and configure high availability.

Create a storage account for the internal private company documents_**
In the portal, search for and select Storage accounts.
Select + Create.
Select the Resource group created in the previous lab.
Set the Storage account name to private. Add an identifier to the name to ensure the name is unique.
Select Review, and then Create the storage account.
Wait for the storage account to deploy, and then select Go to resource.