In this Part 2 of Azure Storage series I discuss BLOB storage in details. The session also consists of Storage Containers where BLOBs reside and the permissions that can be applied on the Containers. I briefly touch on Storage Account security and how to access Storage Account contents using the Primary and Secondary Access Keys. This session is packed with Demos using both Azure Portal and PowerShell cmdlets to access Storage Accounts. I further demo tools such as AZCOPY and Azure Storage Explorer with real life scenarios. View all other sessions in this training series: https://www.youtube.com/playlist?list=PLPie5drlGW25NnMjef7HRdSAqEjxz66Ky

1. Microsoft Azure Training
Shawn Ismail (Azure MVP)
shawn@cloudranger.net
http://www.cloudranger.net

2. Shawn Ismail
Microsoft MVP
Azure Storage – Part 2 – BLOB Storage and Security
Email: shawn@cloudranger.net | Twitter: @shawnismail | Blog: http://www.cloudranger.net | LinkedIn: https://www.linkedin.com/in/shawnismail
YouTube: https://www.youtube.com/c/CloudrangerNetwork
Slides: http://www.slideshare.net/shawnismail

3. Azure Storage – Part 2 – BLOB Storage and Security
BLOB Storage – Binary Large Objects; any type of file or binary data; Storage for storing
unstructured data. E.g., Documents, images, videos, logs files, VM Disks (vhd)
BLOB: https://accountname.blob.core.windows.net
Each BLOB can be of 100GB in size
Containers
Containers are like folders. Bunch of BLOBs can be stored in a Container; just like files in folders
BLOB name: MyNotes.txt
https://accountname.blob.core.windows.net/myContainer/MyNotes.txt

4. Azure Storage – Part 2 – BLOB Storage and Security
Azure Storage Security
• By default all requests to an Azure Storage Account require authentication
• Azure programmatically generates Primary and Secondary Access Keys
Get-AzureStorageKey -StorageAccountName "rangerstore123"
New-AzureStorageKey -KeyType Secondary -StorageAccountName "rangerstore123"
• Access keys offer FULL ADMIN access to Storage

5. Azure Storage – Part 2 – BLOB Storage and Security
Azure Storage Security
Shared Access Signature (SAS)
• Used to grant access to clients that should not have full access
• Timed based access
• SAS URI

6. Azure Storage – Part 2 – BLOB Storage and Security
BLOB Storage Container
Creating Storage Container – Name & Level of Access
Access policies
• Private (default) – Can be accessed only by Storage Account owner
• Public Blob – Public Read Access to Blobs in the container
• Public Container – Allows Public Read Access to the full Container
#create a storage container
$storekey = (Get-AzureStorageKey -StorageAccountName "rangerstore123").Primary
$storecontext = New-AzureStorageContext -StorageAccountName "rangerstore123" -StorageAccountKey $storekey
$container = New-AzureStorageContainer -Name "mypscontainer" -Permission Container -Context $storecontext
Get-AzureStorageContainer -Context $storecontext

7. Azure Storage – Part 2 – BLOB Storage and Security
Storage Access (Using PowerShell)
#Get Storage Context
$storekey = (Get-AzureStorageKey -StorageAccountName "rangerstore123").Primary
$storecontext = New-AzureStorageContext -StorageAccountName "rangerstore123" -StorageAccountKey $storekey
#Get all containers in an Azure Storage Account
Get-AzureStorageContainer -Context $storecontext
#Upload a file from Local storage to Storage Account Container
Set-AzureStorageBlobContent -Context $storecontext -Container "mycontainer" -File "C:tempazcopytxt1.txt"
#Get content of a container
Get-AzureStorageBlob -Context $storecontext -Container "mycontainer"
#Download a Blob (file) from a Storage Container
$blob = (Get-AzureStorageBlob -Context $storecontext -Container "mycontainer").Name
Get-AzureStorageBlobContent -Context $storecontext -Container "mycontainer" -Blob $blob -Destination c:temp
#Remove a specific Blob from a given Container
Remove-AzureStorageBlob -Context $storecontext -Container "mycontainer" -Blob "azcopytxt1.txt"

8. Azure Storage – Part 2 – BLOB Storage and Security
AZCopy
Download: http://aka.ms/downloadazcopy
azcopy /source:c:temp /dest:https://rangerstore123.blob.core.windows.net/mycontainer
/destkey:Kn3FdvQWobk3GbKpezUB76bHY7B/XsbMffrwlCnuCS524TbUUWnRuB6VCAGZsgzYUDPs8D5F7hUaVF9v2vTVuA==
Microsoft Azure Storage Explorer
Download: http://storageexplorer.com/
Microsoft Visual Studio

9. Azure Storage – Part 2 – BLOB Storage and Security
Training Site: http://www.cloudranger.net/azure-training
YouTube : https://www.youtube.com/c/CloudrangerNetwork
Slides : http://www.slideshare.net/shawnismail
Twitter : @shawnismail
Email : shawn@cloudranger.net
LinkedIn : https://www.linkedin.com/in/shawnismail
Thank you for viewing and please the videos on