Configuring Azure Storage Account and Blob Container Walkthrough

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
22 hours 25 minutes
Difficulty
Intermediate
CEU/CPE
24
Video Transcription
00:01
>> Hey, everybody. Welcome back.
00:01
As you can see here, we are in the Azure Portal.
00:01
>> In this lecture, we're going to
00:01
>> be walking through the process of setting up
00:01
an Azure Storage account and a Blob storage container.
00:01
In order to create a storage account,
00:01
I'm going to go to my Create Resource menu
00:01
and I'm going to type in storage account.
00:01
The service will pop down right there,
00:01
as you can see, it is a Microsoft solution.
00:01
We're going to go ahead and hit "Create"
00:01
and we're going to go through configurations.
00:01
I'm going to leave it as subscription 1.
00:01
You can choose whatever subscription you would like.
00:01
You can always create more subscriptions if you need.
00:01
Then we're going to leave it within myResourceGroup2.
00:01
That's just a last resource group that we're working
00:01
with as we go along with this lesson.
00:01
Moving down here for Instance details.
00:01
We're going to actually create
00:01
>> our storage account name.
00:01
>> In this case, it has to be globally unique,
00:01
and so I'm going to make mine cybrarymoysa
00:01
for storage account, and 2,
00:01
and I say 2 because I actually recently created one,
00:01
I had a cybrarymoysa1.
00:01
This is going to be my second version.
00:01
You see this check mark over here?
00:01
This is an indication that you are good to go.
00:01
If you see an X, that means that it's taken.
00:01
This name would be taken and then you
00:01
have to just recreate another name.
00:01
Just come up with something else.
00:01
It's always good to follow a naming scheme
00:01
or some naming convention that
00:01
you're planning to use across
00:01
your entire organization, makes
00:01
things really easy to organize.
00:01
But just for the sake of learning,
00:01
we're just going to make this super simple.
00:01
I'm going to leave this as standard
00:01
because we don't need more performance,
00:01
this is just a lesson.
00:01
We want to walk through the process and
00:01
learn how this works.
00:01
We're going to keep it in US East
00:01
because I'm based out of Florida.
00:01
We're going to leave it as StorageV2, that's fine.
00:01
Replication, I'd like to keep it as
00:01
locally-redundant so that it's cheaper for me.
00:01
I'm going to move over to Networking.
00:01
For Network connectivity, we have
00:01
Public endpoints to all networks.
00:01
This is basically the setting
00:01
that tells us the various methods that we
00:01
could connect to the storage containers
00:01
within the storage account.
00:01
You have several options here.
00:01
You could set it at storage account level
00:01
that only privates,
00:01
it's only a private endpoint,
00:01
only a public endpoint,
00:01
or it could be all networks or whatever.
00:01
You have some options there
00:01
and there's various ways where
00:01
you can set the access controls,
00:01
whether it be the container
00:01
itself or at the storage account layer.
00:01
Just keep that in mind,
00:01
sometimes when you're troubleshooting,
00:01
there could be some issues with,
00:01
maybe you intended for
00:01
a certain blob container to be public access,
00:01
but then the storage account that sits at
00:01
the higher level doesn't want that, doesn't allow that.
00:01
That could theoretically block
00:01
the access to the container itself.
00:01
If you're troubleshooting and you can't figure out
00:01
why you're not able to
00:01
access it from the public Internet,
00:01
it might be a good idea to just
00:01
check this storage account settings.
00:01
Just keep that in mind. We're going to leave
00:01
these network settings as is, good to go there.
00:01
Here's some interesting settings here.
00:01
We have Enable point-in-time restore for containers.
00:01
If you want to add some redundancy,
00:01
you can have backups run consistently
00:01
>> on the containers.
00:01
>> These are some additional
00:01
>> recovery services that are there.
00:01
>> Soft delete essentially allows you to
00:01
mark a container or an object for deletion,
00:01
but there's a seven-day grace period for you to
00:01
>> actually recover it before it is indefinitely deleted.
00:01
>> Soft delete would act as that safety barrier
00:01
>> to make sure that you're not getting rid of something
00:01
>> or that maybe somebody didn't get rid of
00:01
something that you didn't want.
00:01
>> Could be an accident, things happen, right?
00:01
>> We don't want to lose our information
00:01
>> that's super valuable.
00:01
>> As always a good safety check,
00:01
I'm not going to enable it because
00:01
this is just a lesson,
00:01
but just know that that's there for
00:01
your blobs and for
00:01
your containers and for your file shares.
00:01
File shares do fall within your storage account.
00:01
You can't set that up within
00:01
storage account just like you can blobs.
00:01
Just keep that in mind.
00:01
Let's go ahead and move on to Advanced.
00:01
For secure transfer,
00:01
this is all fine.
00:01
This is all good here.
00:01
Notice here on their blob storage,
00:01
we can set it for
00:01
blob public access so we can enable this,
00:01
we wanted to have that access there.
00:01
We can also have Blob access tier to Cool or Hot.
00:01
This is based on your frequency of accessing
00:01
the data stored within that blob, so keep that in mind.
00:01
Cool is going to be infrequently accessed,
00:01
it's the next level to archive from Hot,
00:01
so it sits in the middle.
00:01
But your cost is cheaper,
00:01
but you do end up having to
00:01
wait on access and such like that.
00:01
Hierarchical namespace, if we're going
00:01
to do a data lake, that's okay.
00:01
We're not dealing with anything
00:01
with tables and queues and files
00:01
so we're going to go ahead and move on to Tags.
00:01
We will not add a tag,
00:01
so let's go ahead and go to Review and Create.
00:01
All looks good.
00:01
I'm going to go ahead and hit "Create".
00:01
Just like everything else,
00:01
it does take a little bit for
00:01
the deployment to take place.
00:01
Go ahead and grab yourself a cup of coffee or
00:01
some water, come back and we'll pick it back up.
00:01
Looks like the deployment is now complete.
00:01
We can see deployment details.
00:01
We now have a storage account called cybrarymoysa2.
00:01
If you're following along, that's great.
00:01
You might have your own that's already set up.
00:01
If that's the case, we can go to the resource here,
00:01
and we can see all the details here.
00:01
Here's our dashboard for the storage account.
00:01
As you can see here,
00:01
there's all kind of stuff that we can do.
00:01
We scroll down on the left-hand pane,
00:01
we have our Blob service,
00:01
we have our File service,
00:01
our Table service, our Queue service, Monitoring.
00:01
We have a lot of stuff here.
00:01
It's a lot of great stuff.
00:01
But for this lesson, we're going to focus on blobs.
00:01
In order to set up a blob container,
00:01
we're going to go under Blob service,
00:01
we're going to hit "Containers",
00:01
and we're going to press this
00:01
"Plus Container" button here.
00:01
Here's where we go ahead and create it.
00:01
Wait, I think it has to be all lowercase.
00:01
Yes, test-blob-container.
00:01
We've got a check mark, so we're good.
00:01
I'm going to set it to Private access,
00:01
and I'm going to go ahead and hit "Create".
00:01
That was really quick. As you can see here,
00:01
we have our blob container already set up,
00:01
and I can begin to upload a file.
00:01
When I hit this little blue icon here,
00:01
I'm going to navigate over to
00:01
pictures and double tap my image.
00:01
It's a cat picture here.
00:01
I'll go ahead and hit "Upload".
00:01
Let's go ahead and see if we can look at this picture.
00:01
We have some details here.
00:01
We know that it's a block blob type.
00:01
We have the size information,
00:01
we know that it's Hot,
00:01
or it's inferred to as such.
00:01
It's going to be a JPEG,
00:01
>> it did give us a data type right there.
00:01
>> Let's see, if we downloaded.
00:01
You can go ahead and touch that.
00:01
Here's our picture.
00:01
This was successfully stored
00:01
inside our Azure Blob container.
00:01
It gave us all the information we needed.
00:01
You guys can now see how
00:01
simple it is to go ahead and set up
00:01
your first Azure Blob and upload and delete.
00:01
It's very simple, very fast.
00:01
Everybody, that wraps up
00:01
this lecture, I hope this was helpful.
00:01
You should be pursuing a lab very shortly,
00:01
possibly in the next lecture where you're going to
00:01
be working on building
00:01
your own lab and uploading data
00:01
>> and all that good stuff.
00:01
>> Enjoy that. If you have any questions,
00:01
feel free to reach out to me.
00:01
If not, I'll see you in the next lecture.
Up Next
Configure Azure Blob with Public Access Lab
45m
Use Azure Storage Explorer Lab
45m