Azure Storage Security and Additional Tooling
In the previous two chapters, we talked about Azure Storage with a focus on Blob and File Storage Services. Those chapters were meant to give you a general overview of those services’ capabilities and configuration options. This chapter will summarize our findings and lessons learned and, additionally, give you more insights into security options for Azure Storage and what’s possible to do and implement when challenged with automation tasks and data import/export activities.
Topics covered in this chapter may be considered advanced, as they require prior knowledge of Blob Service configuration (described in Chapter 9), Azure AD concepts (Chapter 2), and managed identities (Chapter 2). Let’s see what’s going to be described shortly:
- Configuring soft delete in Blob Storage
- Using Azure AD for authorization
- Using managed identities
- Considering various options for automation
- Using the Azure...