A Guide on How to Provide Storage for an IT Department Testing and Training using Microsoft Azure
Introduction Let's assume the IT Department where you work needs to prototype different storage scenarios to train new personnel, and you've been tasked with providing storage where the content is not important enough to be backed up and doesn't need to be restored if the data is overwritten or removed. In this guide, you'll learn how to create and configure an Azure storage account that meets these requirements. We'll walk through setting up a resource group, deploying a storage account, and applying basic security and networking settings to ensure efficient and cost-effective storage management. By the end of this tutorial, you'll have a functional storage environment that can be used for training and testing, without unnecessary overhead or long-term commitments. Let’s get started! Create a resource group and a storage account. Step 1: Create and deploy a resource group to hold all the project resources Login to the Azure Portal and search for and select Resource groups. Select + Create. Give your resource group a name. For example, storagerg. Select a region. Your choice of region should be used throughout the project. Select Review and create to validate the resource group. Select Create to deploy the resource group. Step 2: Create and deploy a storage account to support testing and training. In the Azure portal, search for and select Storage account. Select + Create. On the Basics tab, select your Resource group. Provide a storage account name. The storage account name must be unique in Azure. Set the Performance to Standard. -Select Review, and then create. Finally, wait for the storage account to deploy and then Go to resource. Configure simple settings in the storage account Recall that the data in this storage doesn't require high availability or durability. A lowest-cost storage solution is desired. Step 3: Configure the Data Redundancy of the Storage Account In your storage account, in the Data Management section, select the Redundancy blade. Select Locally-redundant storage (LRS) in the Redundancy drop-down. Don't forget to Save your changes. Finally, refresh the page and notice the content only exists in the primary location. We also need to ensure the storage account only accepts requests from secure connections and uses at least a Transfer Layer Security (TLS) version 1.2. Until the storage is needed again, disable requests to the storage account. Step 4: Enable a Secure Transfer in Storage Account In the Settings section, select the Configuration blade. Ensure Secure transfer required is enabled. Ensure the Minimal TLS version is set to Version 1.2. Finally, ensure the Allow storage account key access is Disabled. Step 5: Allow the Storage Account to have public Access from all Networks In the Security + networking section, select the Networking blade. Ensure Public network access is set to Enabled from all networks. Conclusion By following these steps, you've successfully set up a cost-effective Azure storage solution tailored for training and testing scenarios. This storage account is optimized for minimal redundancy, secure data transfers, and public accessibility, making it ideal for non-critical data that doesn't require backup or restoration. This setup allows your IT team to experiment with different storage configurations without incurring unnecessary costs or complexity. As your needs evolve, you can further refine security, networking, and access policies to align with future projects. Now that your storage account is ready, you can start using it for training exercises, prototyping, or even exploring additional Azure storage features. Happy testing!
Introduction
Let's assume the IT Department where you work needs to prototype different storage scenarios to train new personnel, and you've been tasked with providing storage where the content is not important enough to be backed up and doesn't need to be restored if the data is overwritten or removed.
In this guide, you'll learn how to create and configure an Azure storage account that meets these requirements. We'll walk through setting up a resource group, deploying a storage account, and applying basic security and networking settings to ensure efficient and cost-effective storage management.
By the end of this tutorial, you'll have a functional storage environment that can be used for training and testing, without unnecessary overhead or long-term commitments. Let’s get started!
Create a resource group and a storage account.
Step 1: Create and deploy a resource group to hold all the project resources
- Login to the Azure Portal and search for and select
Resource groups.
- Select + Create.
- Give your resource group a name. For example,
storagerg. Select a region. Your choice of region should be used throughout the project.
Select Review and create to validate the resource group.
- Select Create to deploy the resource group.
Step 2: Create and deploy a storage account to support testing and training.
- In the Azure portal, search for and select
Storage account.
- Select + Create.
- On the Basics tab, select your Resource group.
- Provide a storage account name. The storage account name must be unique in Azure.
- Set the Performance to Standard. -Select Review, and then create.
- Finally, wait for the storage account to deploy and then Go to resource.
Configure simple settings in the storage account
Recall that the data in this storage doesn't require high availability or durability. A lowest-cost storage solution is desired.
Step 3: Configure the Data Redundancy of the Storage Account
- In your storage account, in the Data Management section, select the Redundancy blade.
Select Locally-redundant storage (LRS) in the Redundancy drop-down.
Don't forget to Save your changes.
Finally, refresh the page and notice the content only exists in the primary location.
We also need to ensure the storage account only accepts requests from secure connections and uses at least a Transfer Layer Security (TLS) version 1.2.
Until the storage is needed again, disable requests to the storage account.
Step 4: Enable a Secure Transfer in Storage Account
- In the Settings section, select the Configuration blade.
Ensure Secure transfer required is enabled.
Ensure the Minimal TLS version is set to Version 1.2.
Finally, ensure the Allow storage account key access is Disabled.
Step 5: Allow the Storage Account to have public Access from all Networks
- In the Security + networking section, select the Networking blade.
- Ensure Public network access is set to Enabled from all networks.
Conclusion
By following these steps, you've successfully set up a cost-effective Azure storage solution tailored for training and testing scenarios. This storage account is optimized for minimal redundancy, secure data transfers, and public accessibility, making it ideal for non-critical data that doesn't require backup or restoration.
This setup allows your IT team to experiment with different storage configurations without incurring unnecessary costs or complexity. As your needs evolve, you can further refine security, networking, and access policies to align with future projects.
Now that your storage account is ready, you can start using it for training exercises, prototyping, or even exploring additional Azure storage features. Happy testing!
