Introduction
In this guide, we will look at Azure Storage Accounts and how they work as secure cloud storage for files and data. Think of them as digital lockers that help you store and manage data from anywhere.
What Is a Storage Account in Azure?
Imagine you have many digital files such as documents, photos, and videos, and you want a secure place to store them where you can access them from anywhere. Azure Storage Accounts provide that place in the cloud.
According to Microsoft Azure documentation, Azure Storage is Microsoft's cloud storage solution for modern data storage scenarios. It provides:
- A massively scalable object store for data objects
- A file system service for the cloud
- A messaging store for reliable messaging
- A NoSQL store
Azure Storage is:
- Durable and highly available: redundancy helps protect data from transient hardware failures
- Secure: data written to Azure Storage is encrypted by the service
- Scalable: it is designed to meet the performance and storage needs of modern applications
Services Provided by Azure Storage Account
Azure Storage Accounts provide several services that solve different storage needs.
Blob Storage
Azure Blob Storage is optimized for storing massive amounts of unstructured data such as documents, images, videos, and logs. It is often used to serve content directly to web browsers or to store files for applications.
File Storage
Azure File Storage offers fully managed file shares in the cloud that can be accessed through the SMB protocol. It is useful for migrating legacy applications or sharing files across virtual machines.
Queue Storage
Azure Queue Storage provides reliable message queuing for asynchronous communication between application components. It helps decouple parts of an application so they can scale more easily.
Table Storage
Azure Table Storage is a NoSQL data store that uses key/attribute storage with a schema-less design. It works well for structured and semi-structured data like logs, metrics, and telemetry.
Disk Storage
Azure Disk Storage provides scalable and highly available block storage for virtual machines and applications running in Azure. It includes Premium and Standard SSD options.
Azure Data Lake Storage
Azure Data Lake Storage is a secure and scalable data lake solution for big data analytics. It includes fine-grained access control, hierarchical namespace support, and integration with services such as Azure Databricks and Azure Synapse Analytics.
How to Create a Storage Account
Step 1: Open the Azure Portal
Open the Azure Portal and search for Storage Account.
Step 2: Create a New Storage Account
Click the Create button to start creating a new storage account.
Step 3: Basic Details
In the Basic tab, provide the core details for your storage account.
The key settings are:
- Subscription: choose the Azure subscription you want to use
- Resource Group: select an existing group or create a new one
- Storage Account Name: provide a unique name for the account
- Region: choose the closest region to your users for better response time
- Performance: choose Standard or Premium depending on your needs
- Redundancy: select a replication strategy that matches your durability requirements
If needed, you can continue to the advanced configuration tabs. Otherwise, you can go directly to review and create the storage account.
Step 4: Advanced Details
The Advanced tab contains additional configuration options for the storage account.
Important options include:
- Require secure transfer for REST API operations: forces SSL/TLS for all REST traffic
- Allow enabling anonymous access on individual containers: enables public blob container access when needed
- Enable storage account key access: allows access through storage account keys
- Default to Microsoft Entra authorization in the Azure portal: uses Microsoft Entra as the primary portal auth method
- Minimum TLS version: sets the minimum acceptable TLS version
- Permitted scope for copy operations: controls copy operation scope
- Enable hierarchical namespace: supports directory-style organization in Blob Storage
- Enable SFTP: enables secure file transfer protocol access
- Enable network file system v3: adds NFS v3 support for compatible workloads
- Allow cross-tenant replication: enables replication across tenants
- Access tier: choose Hot or Cool based on usage patterns
- Enable large file shares: allows file shares up to 100 TiB
Step 5: Networking Details
This tab defines how the storage account is reachable over the network.
The main settings are:
- Network Access: determines whether the storage account is accessible from all networks
- Routing Preference: chooses the preferred traffic routing method, such as Microsoft network routing or Internet routing
Step 6: Data Protection
The Data Protection tab helps you configure recovery and tracking features.
The key options include:
- Enable point-in-time restore for containers: restore containers to an earlier state
- Enable soft delete for blobs: recover deleted blobs within a retention window
- Enable soft delete for containers: recover deleted containers for a period of time
- Enable soft delete for file shares: recover deleted file shares
- Enable versioning for blobs: keep track of blob changes over time
- Enable blob change feed: track creations, updates, and deletions
- Enable version-level immutability support: prevent versions from being changed or deleted during retention
Step 7: Encryption
You can configure the encryption settings for the storage account in this tab.
Step 8: Tags
Tags are name/value pairs that help categorize resources and support consolidated billing.
Step 9: Review
Review all the settings before creating the account. If everything looks correct, click Create.
Step 10: Open the Resource
After Azure finishes provisioning the storage account, use the Go to Resource button to open it from the portal.
You can now create and use services such as Blob Storage, File Storage, Table Storage, and Queue Storage.
