Securing Azure Storage

Securing Azure Storage starts with an overview outlining the various authentication and authorization methods available to access Azure storage resources. We then look at each method, examining its benefits and disadvantages. Setting up access to storage resources using account keys and the various shared access signature variants demonstrates the practical implications and use cases of each access method. The lesson ends with a look at implementing Azure files as a mapped drive within an Azure virtual machine.

Learning Objectives

• Overview of Azure account storage authentication and access
• Create an account key rotation policy
• See how to integrate storage account keys with Azure Key Vault
• Implement Shared Access Signatures
• Map a virtual machine drive to an Azure file share

Intended Audience

• Students working towards the AZ-500: Microsoft Azure Security Technologies exam
• Those wanting to learn how to secure an Azure storage account

Prerequisites

• Be familiar with Active Directory concepts such as managed identities and role-based access control, Azure Key Vault, and the basics of Azure storage resources