Chapter 10: Implementing Storage Security
Azure Storage is the primary data storage solution in Azure. It offers services that can be used to store different datasets, including files, messages, tables, and other types of information. As you can imagine, this service is a prime target for attackers who are looking to steal sensitive information from organizations! Azure Storage provides multilayered security options to protect our data. Our focus in this chapter will be on how to implement these security options for two primary services of Azure Storage – Blob and Files. Here are the topics that we will cover in this chapter:
- Implementing encryption at rest
- Implementing encryption in transit
- Configuring storage account authorization
- Implementing Azure Defender for Storage
As you will see, each topic has been structured to align with a security best practice for securing storage in Azure. Let's get into this!
