DEV Community

Cover image for Provide private storage for internal company documents(Steps)
olaniyi akinkunmi
olaniyi akinkunmi

Posted on

Provide private storage for internal company documents(Steps)

Storage Plan

Image description
Task
*Create a storage account.
*Create a storage container with restricted access.
*Configure a shared access signature for partners.
*Back up the public website storage.
*Implement lifecycle management to move content to the cool
tier.
Exercise instructions

Create a storage account and configure high availability.
1.Create a storage account for the internal private company documents.
*In the portal, search for and select Storage accounts.
Image description

*Select + Create.
Image description

*Select the Resource group created in the previous lab.
Image description

*Set the Storage account name to private. Add an identifier to the name to ensure the name is unique.
Image description

*Select Review, and then Create the storage account.
Image description

*Wait for the storage account to deploy, and then select Go to resource.
Image description

2.This storage requires high availability if there’s a regional outage. Read access in the secondary region is not required. Configure the appropriate level of redundancy.

*In the storage account, in the Data management section, select the Redundancy blade.
Image description

*Ensure Geo-redundant storage (GRS) is selected.
Image description

*Refresh the page.
Image description

*Review the primary and secondary location information.
Image description

*Save your changes.
Image description

Create a storage container, upload a file, and restrict access to the file.

1.Create a private storage container for the corporate data.

*In the storage account, in the Data storage section, select the Containers blade.
Image description

*Select + Container.
Image description

*Ensure the Name of the container is private.
Image description

*Ensure the Public access level is Private (no anonymous access).
*As you have time, review the Advanced settings, but take the defaults.
*Select Create.
Image description

2.For testing, upload a file to the private container. he type of file doesn’t matter. A small image or text file is a good choice. Test to ensure the file isn’t publically accessible.

*Select the container.
Image description

*Select Upload.
Image description

*Browse to files and select a file.
Image description

*Upload the file.
Image description

*Select the uploaded file.
Image description

*On the Overview tab, copy the URL.
Image description

*Paste the URL into a new browser tab.
Image description
Image description

3.An external partner requires read and write access to the file for at least the next 24 hours. Configure and test a shared access signature (SAS). Learn more about Shared Access Signatures.

*Select your uploaded blob file and move to the Generate SAS tab.
Image description

*In the Permissions drop-down, ensure the partner has only Read permissions.
Image description

*Verify the Start and expiry date/time is for the next 24 hours.
Image description

*Select Generate SAS token and URL.
Image description

*Copy the Blob SAS URL to a new browser tab.
Image description

*Verify you can access the file. If you have uploaded an image file it will display in the browser. Other file types will be downloaded.
Image description

Configure storage access tiers and content replication.
1 To save on costs, after 30 days, move blobs from the hot tier to the cool tier. Learn more how manage the Azure Blob storage lifecycle.

*Return to the storage account.
Image description

*In the Overview section, notice the Default access tier is set to Hot.
Image description

*In the Data management section, select the Lifecycle management blade.
Image description

*Select Add rule.
Image description

*Set the Rule name to movetocool.
Image description

*Set the Rule scope to Apply rule to all blobs in the storage account.
Image description

*Select Next.
Image description

*Ensure Last modified is selected.
Image description

*Set More than (days ago) to 30.
Image description

*In the Then drop-down select Move to cool storage.
Image description

*As you have time, review other lifecycle options in the drop-down.
*Add the rule.
Image description

2 The public website files need to be backed up to another storage account.[Learn more about object replication.

*In your storage account, create a new container called backup. Use the default values. Refer back to Lab 02a if you need detailed instructions.
Image description

*Navigate to your publicwebsite storage account. This storage account was created in the previous exercise.
Image description

*In the Data management section, select the Object replication blade.
Image description

*Select Create replication rules.
Image description

*Set the Destination storage account to the private storage account.
Image description

*Set the Source container to public and the Destination container to backup.
Image description

*Create the replication rule.
Image description

*Optionally, as you have time, upload a file to the public container. Return to the private storage account and refresh the backup container. Within a few minutes your public website file will appear in the backup folder.
Image description

Image description

Image description
YES WE DID IT

Top comments (0)