This video goes over two ways of restricting access to Microsoft Azures PaaS services; Service Endpoints and Private Endpoints. Both are used to restrict access to PaaS serviced, but work differently. The video gives an overview if the differences and then does a walkthrough of deploying Service Endpoints and Private Endpoints using an Azure Storage account as an example.
Continue reading “Azure Virtual Networking Service Endpoints and Private Endpoints”Version 10 of AZCopy.exe can now delete files at the destination to keep it in complete sync with the source. This video shows how to use the delete-destination option to sync a local file structure to an Azure Storage Account. Used with Soft Delete on Azure Storage, this provides an interesting alternative to traditional backup solutions.
Link to AZCopy V10
A Content Delivery Network, or CDN, is a globally distributed network for delivering, well, content. Content can include images, videos, CSS and any other asset used for providing web services. The advantages to a CDN include: caching data closer to the users to increase web site performance, improving reliability by leveraging a global caching network and reducing bandwidth by shifting traffic to the CDN.
Continue reading “How to configure an Azure CDN”
I got the a good question below from Zaniar this week:
My question —- If Azure VM’s are encrypted at rest now (SSE) does this mean the data on the volumes are also encrypted? and if we want a further layer of encryption should we use BEK or KEK which one is better?
Continue reading “Is Azure Disk Encryption Necessary?”
As of today, Microsoft has a few different ways of encrypting Azure data. The options for Azure Data Encryption on servers include Storage Service Encryption and Azure Disk Encryption. Below is a quick summery of each.
This is at the storage account level and encrypts data at rest. Encryption takes place as the data is written to storage and decrypted when it’s read. Continue reading “Azure Data Encryption”