Summary

  • 5 minutes

Azure Storage provides a layered security model. You can use this model to secure your storage accounts to a specific set of supported networks. When you set up network rules, only applications that request data over the specified networks can access your storage account.

Authorization is supported by a public preview of Microsoft Entra credentials (for blobs and queues), a valid account access key, or a shared access signature (SAS) token. Data encryption is enabled by default, and you can proactively monitor systems by using Advanced Threat Protection.

Check your knowledge

1.

You are working on a project with a 3rd party vendor to build a website for a customer. The image assets that will be used on the website are stored in an Azure Storage account that is held in your subscription. You want to give read access to this data for a limited period of time. What security option would be the best option to use?

2.

When configuring network access to your Azure Storage Account, what is the default network rule?

3.

Which Azure service detects anomalies in account activities and notifies you of potential harmful attempts to access your account?