Azure Storage Account is a container that groups a set of azure storage services together. Azure Storage Accounts provide scalable, secure cloud storage for blobs, files, tables, and queues. Whether you need to store application data, host static websites, or manage backups, setting up a storage account is essential.
This guide walks you through creating and configuring an Azure Storage Account, covering key settings like redundancy, access tiers, networking, and security. Let’s begin!
Step 1 Create and deploy a resource group to hold all your project resources.
A resource group is a logical container that houses similar azure resources together.
- In the Azure portal, search for and select Resource groups.
- Select + Create.
Give your resource group a name. For example, Bistoragerg
Select a region. Use this region throughout the project.
Select Review and create to validate the resource group.
- Select Create to deploy the resource group.
- Resource group is successfully created
Step 2 Create and deploy a storage account.
- In the Azure portal, search for and select Storage accounts.
- Select + Create.
On the Basics tab, select your Resource group.
Provide a Storage account name. The storage account name must be unique in Azure. e.g binmastorage
Set the Performance to Standard.
Select Review, and then Create.
- Wait for the storage account to deploy and then Go to resource.
Configure simple settings in the storage account.
In this Guide, we will configure the following key settings for an Azure Storage Account:
Redundancy (Lowest Cost, Minimal Durability) – Set to Locally-redundant storage (LRS) for cost efficiency.
In your storage account, in the Data management section, select the Redundancy blade.
Select Locally-redundant storage (LRS) in the Redundancy drop-down.
Be sure to Save your changes.Refresh the page and notice the content only exists in the primary location.
Secure Transfer (HTTPS Enforcement) – Enable to enforce encrypted connections.
The storage account should only accept requests from secure connections. Learn more about requiring secure transfer from secure connections
- In the Settings section, select the Configuration blade.
Ensure Secure transfer required is** Enabled.**
Minimum TLS Version (Enhanced Security) – Configure to TLS 1.2 for improved security.
Disable Storage Account Key Access – Temporarily block key-based access when inactive.
Save your changes.
Public Network Access (Allow All Traffic) – Permit public access from all networks.
In the Security + networking section, select the Networking blade.
Ensure Public network access is set to Enabled from all networks.
Save your changes.
Conclusion
You've successfully created and configured an Azure Storage Account with optimized settings for cost, security, and accessibility. By setting LRS redundancy, enforcing HTTPS, requiring TLS 1.2, disabling key access, and allowing public traffic, you've tailored the storage account to your needs.
This setup provides a balance between low-cost storage and essential security measures, making it suitable for various use cases like backups, static websites, or application data.
Top comments (0)