Create a storage account for the internal private company documents.
- In the portal, search for and select Storage accounts.
- Select the Resource group created in the previous lab.
- Select Review, and then Create the storage account.
This storage requires high availability if there’s a regional outage. Read access in the secondary region is not required. Configure the appropriate level of redundancy.
- In the storage account, in the Data management section, select the Redundancy blade.
- Review the primary and secondary location information.
Create a storage container, upload a file, and restrict access to the file.
1.Create a private storage container for the corporate data.
- In the storage account, in the Data storage section, select the Containers blade.
- Ensure the Name of the container is private.
- As you have time, review the Advanced settings, but take the defaults.
For testing, upload a file to the private container. he type of file doesn’t matter. A small image or text file is a good choice. Test to ensure the file isn’t publically accessible.
- Select the container.
- Browse to files and select a file.
- Select the uploaded file.
- Paste the URL into a new browser tab.
An external partner requires read and write access to the file for at least the next 24 hours. Configure and test a shared access signature (SAS).
- Select your uploaded blob file and move to the Generate SAS tab.
- Verify the Start and expiry date/time is for the next 24 hours.
- Copy the Blob SAS URL to a new browser tab.
Configure storage access tiers and content replication.
To save on costs, after 30 days, move blobs from the hot tier to the cool tier.
- Return to the storage account.
- In the Data management section, select the Lifecycle management blade.
Set the Rule name to movetocool.
Select Next.
Set More than (days ago) to 30.
Add the rule.
- In the Data management section, select the Object replication blade.
Set the Destination storage account to the private storage account.
- Create the replication rule.
- In conclusion
This project successfully demonstrated the end-to-end configuration and management of a secure, resilient, and cost-optimized Azure Storage solution for enterprise use. A storage account was provisioned and configured with Geo-Redundant Storage (GRS) to ensure high availability and business continuity in the event of a regional outage. This setup guarantees data durability while maintaining operational reliability.
A private storage container was created to securely host internal corporate documents, with public access explicitly restricted to prevent unauthorized exposure. Access control was further enhanced through the implementation of a Shared Access Signature (SAS), enabling time-bound and permission-specific access for an external partner without compromising overall security.
Cost optimization strategies were implemented using lifecycle management policies, automatically transitioning blobs from the hot tier to the cool tier after 30 days. Additionally, object replication was configured to back up public website files to a secondary storage account, strengthening data protection and disaster recovery capabilities.
SOCIAL SHARE CARD GENERATOR