Securing Blob storage access

Develop for Azure Storage

Shahzad Mian

Content developer, DataCamp

Unauthorized access

Azure security

• Encryption at rest, to secure stored data
• Encryption in transit protects data whilst it's moving.
• Access controls, to define who can see or manage your blobs
• Networking restrictions, to limit access based on IP ranges or private endpoints
• Monitoring and alerts, to track suspicious behavior and take action

Encryption at rest

• Automatic encryption of data.

• Auto encryption before its saved.

Encryption in transit

• Encryption in transit protects data on the move.
• Azure uses Transport Layer Security (TLS) to create a secure tunnel.
• Intercepted data appears scrambled and unreadable.
• Protects payment details and personal information.
• Essential for Cipher Coffee to maintain trust and compliance.

Extra security

• Encryption alone isn't enough.
• Access control allows control over who can access your data.
• Only authenticated users or apps can access.

Shared Access Signatures

• Only specific people or apps can access the data when they have the "hall pass".

Access type

• Download permissions, but not upload or delete.

Timed access

• Time window of access for hours or a few minutes.

IP restrictions

Let's practice!

Develop for Azure Storage