Azure Storage account allows you to store data objects (blobs, files, queues, tables or disks) in the cloud. When you create a storage account you have to select a redundancy option – from locally redundant (LRS) to Geo-zone redundant (GZRS), and anything in between. If you selected a non-zonal (LRS or GRS) redundancy option, it …
If you use Azure Files, you are probably already aware you could configure Active Directory Kerberos authentication to manage files (and folders) permissions (see https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview/). This involved deploying Azure Active Directory Services or having access to Active Directory domain controllers. Well, good news, it is now becoming easier thanks to the new Azure AD Kerberos …
Azure – You can now use Azure AD Kerberos authentication to access files Read More »
In February 2022, a new root and intermediate certificate authorities will be used for Azure Storage TLS certificate. The new authority will be DigiCert Global G2 Root. For most of Azure Storage deployment this change will have no impact and will be totally transparent. However if you have explicitly define a list of acceptable CA …
If you work with Azure Storage accounts, you may already know the Azure Storage Explorer utility you can install on your client (Windows or MacOS) as well as it equivalent from the Azure portal. Well, the Storage Explorer experience from the portal has changed and is now called Storage browser and provides a simplified storage …
Azure – A new Storage Explorer experience is available (preview) Read More »
As you know, you can protect your Azure Storage account by using shared access signatures and/or restricting from which network the storage account can be access. The later use the service endpoint Microsoft.Storage you enable on your virtual network and/or subnet. Well, the use of service endpoint to restrict access to your storage account from …
As you know, you can use access keys to access Azure Storage Account content (Blob, Table, File…). While this is helpful this also implies some security risk when using public endpoints. Well, good news, you can now disable account access keys on storage account to use Azure AD authentication instead. IMPORTANT if you disable account …
Azure – You can now disable Storage Account Access Keys (preview) Read More »
As you know you can use Azure Storage account to host file shares on Azure. Also you are aware that you can backup your Azure File share to an Azure Recovery Vault. While the file share backup has been available for configuration from the Azure Recovery Vault settings for a while, you can now configure …
Azure – You can now enable backup directly from the File blade Read More »
As you know Azure Storage account is the Azure service allowing you storing data on blobs, files, queues or tables, providing a unique namespace to access the content from anywhere (according to your security and permissions settings) using HTTP protocol (in fact HTTPS). Well, Azure Storage account now support NFS (Network File System) version 3 …
Azure – Azure Storage account now support NFS 3.0 (preview) Read More »
Disclaimer you need to evaluate if you need or not to enable this new feature, anonymous read access on Azure Blob Storage, as any client will be able to read the data stored on the corresponding Blob Storage. As you know, access to data stored on Azure Blob Storage is managed either by implementing Azure …
Azure – You can now enable anonymous read access on Blob Storage or Container Read More »
