Provide shared file storage for the company offices.
This is a continuation of the previous article. The company is geographically dispersed with offices in different locations. These offices need a way to share files and disseminate information. For example, the Finance department needs to confirm cost information for auditing and compliance. This file shares should be easy to access and load without delay. Some content should only be accessed from selected corporate virtual networks.
Create and configure a storage account for Azure Files.
Create a storage account for the finance department’s shared files.
For Resource group select Create new. Give your resource group a name and select OK to save your changes.
Provide a Storage account name. Ensure the name meets the naming requirements.
Set the Performance to Premium.
Set the Premium account type to File shares.
Set the Redundancy to Zone-redundant storage.
Wait for the resource to deploy.
Create and configure a file share with directory.
Create a file share for the corporate office.
In the storage account, in the Data storage section, select the File shares blade.
Review the other options, but take the defaults.
Add a directory to the file share for the finance department. For future testing, upload a file.
Notice you can Add directory to further organize your file share.
Configure and test snapshots.
Similar to blob storage, you need to protect against accidental deletion of files. You decide to use snapshots.
- Select your file share.
- In the Operations section, select the Snapshots blade.
Select your snapshot and verify your file directory and uploaded file are included.
Practice using snapshots to restore a file.
- Return to your file share.
Locate your uploaded file and in the Properties pane select Delete. Select Yes to confirm the deletion.
Navigate to the file you want to restore,
Configure restricting storage access to selected virtual networks.
This requires a virtual network with subnet. In a production environment these resources would already be created.
Select your resource group and give the virtual network a name.
Take the defaults for other parameters, select Review + create, and then Create.
Wait for the resource to deploy.
In the Settings section, select the Subnets blade.
In the Service endpoints section choose Microsoft.Storage in the Services drop-down.
Do not make any other changes.
The storage account should only be accessed from the virtual network you just created.
- Return to your files storage account.
In the Security + networking section, select the Networking blade.
Change the Public network access to Enabled from selected virtual networks and IP addresses.
In the Virtual networks section, select Add existing virtual network.
Select your virtual network and subnet, select Add.
Verify the message not authorized to perform this operation. You are not connecting from the virtual network.
Top comments (0)