Securing Azure Storage
It's great to know how to manage Azure Storage, and even to follow best practices throughout the process. However, securing your storage should be your biggest concern, especially because storage is the base on which all your Infrastructure as a service (IaaS) services run.
Throughout this topic, we will cover the following methods to secure Azure Storage:
- Role-Based Access Control (RBAC)
- Access keys
- Shared access signature (SAS)
RBAC
Giving every user the exact permissions they need should be your first concern in order to avoid a complete disaster if a user's credentials were exposed.
RBAC would help you with segregating duties within your team; specifically, everyone would only be granted the required permissions to get their job done.
RBAC role assignments would be granted based on:
- Subscription
- Resource group
- Resource
For example, RBAC can be used to grant permissions for a user to manage the virtual machines within a subscription, or to grant permissions for a user to manage...
