Exercise - Provide storage for the IT department testing and training
Published: 2024-01-22 15:54:33


##Create a resource group 

In Microsoft Azure, a resource group is a logical container that holds related Azure resources such as virtual machines, storage accounts, and networking solutions. Resource groups are used to manage and organize resources within an Azure subscription.

- In the Azure portal, search for and select Resource groups.
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/1cotsxj380kyrmoeom75.png)

- Select + Create.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/1zaza4dno3jp7frgbel3.png)

- Give your resource group a name.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/jd6xmu0iaqg9xclg755a.png)


- Select a region. Use this region throughout the project.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/7csjcqxjibptq69oc07q.png)


- Select Review and create to validate the resource group.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/fylh1j8hsupqkho67o4k.png)

- Select Create to deploy the resource group.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/jvmooqw09ph22takx426.png)



##Create and deploy a storage account to support testing and training.

In Microsoft Azure, a storage account is a service that provides a scalable and secure location to store data in the cloud. It serves as the foundational building block for various Azure storage services, offering different types of storage to suit different needs. Azure Storage supports a variety of data types, including blobs (binary large objects), files, queues, tables, and disks. Here are some key features and aspects of Azure Storage Accounts:

- In the Azure portal, search for and select Storage accounts.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/0mv11au3yajq2q4oflce.png)
- Select + Create.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/8vg4e2q1gflr4ew7kbpi.png)

- On the Basics tab, select your Resource group.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/dl26q30s5qe9utnnap60.png)

- Provide a Storage account name. The storage account name must be unique in Azure.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/8cemmky65dtaml51ol44.png)
- Set the Performance to Standard.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/hpz7gdmfu7w61khlwnlr.png)

- Select Review, and then Create.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/s1bt4770bpzirbkou9al.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/77jw1hmkl6bif0jucj3x.png)

- Wait for the storage account to deploy and then Go to resource.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/0w5dgbj65avapjsug1k8.png)

###Configure simple settings in the storage account.

The data in this storage account doesn’t require high availability or durability. A lowest cost storage solution is desired.


- In your storage account, in the Data management section, select the Redundancy blade.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/oawjn7qr0t0yzdbbojx8.png)

- Select Locally-redundant storage (LRS) in the Redundancy drop-down.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/j169sohn7g8j53sm64y4.png)

Be sure to Save your changes.

- Refresh the page and notice the content only exists in the primary location.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/avac5v440zzmmpm27kwi.png)



The storage account should only accept requests from secure connections. 


- In the Settings section, select the Configuration blade.
Ensure Secure transfer required is Enabled.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/23rum45wtmgpgemhhdoh.png)


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/7kqec6etx8siez8vubz0.png)


Developers would like the storage account to use at least TLS version 1.2

- In the Settings section, select the Configuration blade.
Ensure the Minimal TLS version is set to Version 1.2.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/23rum45wtmgpgemhhdoh.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/8aa03g20w67cni55z4cd.png)

- Until the storage is needed again, disable requests to the storage account. Learn more about disabling shared keys.



- In the Settings section, select the Configuration blade.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/23rum45wtmgpgemhhdoh.png)


- Ensure Allow storage account key access is Disabled.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/1pgoqbf0uxdgctdmtsih.png)

Be sure to Save your changes.

##Ensure the storage account allows public access from all networks.


- In the Security + networking section, select the Networking blade.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/mj5xgeqq838d4fmwepwo.png)

- Ensure Public network access is set to Enabled from all networks.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/p855wgja4969klepw1w1.png)

Be sure to Save your changes.