As you know many resources on Azure support TLS, letting you also the choice between TLS 1.0, TLS 1.1 or TLS 1.2. As you also probably know TLS 1.0 or TLS 1.1 are now the weakest versions and are also deprecated since 2021; meaning if you are using one of these version you […]
Azure – Get ready for default TLS version change for storage account Read More »
As you know, you can implement geo redundancy for Azure Storage account and Azure File Shares. But there was some limitations such as the size of the file share. Well, good news, as you can now use this redundancy for large file shares and even better it is supported for production, even if this is
Azure – Geo redundancy is now available in preview for large file shares (preview) Read More »
As you know you have 3 different access tiers available for storage account – hot, cool, archive – you have to define based on the access type (frequency) to the data stored in storage account. Well, a fourth new one is now available in preview: Cold. NOTE during the preview this new tier
Azure – New access tier for Storage Account – Cold – in preview Read More »
Azure Storage account allows you to store data objects (blobs, files, queues, tables or disks) in the cloud. When you create a storage account you have to select a redundancy option – from locally redundant (LRS) to Geo-zone redundant (GZRS), and anything in between. If you selected a non-zonal (LRS or GRS) redundancy option, it
If you use Azure Files, you are probably already aware you could configure Active Directory Kerberos authentication to manage files (and folders) permissions (see https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview/). This involved deploying Azure Active Directory Services or having access to Active Directory domain controllers. Well, good news, it is now becoming easier thanks to the new Azure AD Kerberos
Azure – You can now use Azure AD Kerberos authentication to access files Read More »
In February 2022, a new root and intermediate certificate authorities will be used for Azure Storage TLS certificate. The new authority will be DigiCert Global G2 Root. For most of Azure Storage deployment this change will have no impact and will be totally transparent. However if you have explicitly define a list of acceptable CA
As you know, you can protect your Azure Storage account by using shared access signatures and/or restricting from which network the storage account can be access. The later use the service endpoint Microsoft.Storage you enable on your virtual network and/or subnet. Well, the use of service endpoint to restrict access to your storage account from
This has been a long awaited capability, being able to setup a serverless FTP. Well, good news, you can now enabled SFTP (Secure FTP) access to your blob storage. First thing first, you need to register the SFTP support for Azure Blob Storage provider by accessing the Preview features blade from your subscription This feature
Azure – You can now enable SFTP access to Azure Blob storage (preview) Read More »
As you know, you can use access keys to access Azure Storage Account content (Blob, Table, File…). While this is helpful this also implies some security risk when using public endpoints. Well, good news, you can now disable account access keys on storage account to use Azure AD authentication instead. IMPORTANT if you disable account
Azure – You can now disable Storage Account Access Keys (preview) Read More »
As we know, mistakes happen even if there is safeguard in place (like locking deletion activities at the resource group or the resource level; this should be a best practice, especially on any production resource groups or resources). You can now recover deleted storage account. To be able to recover a deleted storage account, you
Azure – You can now recover deleted storage account Read More »
