This video goes over two ways of restricting access to Microsoft Azures PaaS services; Service Endpoints and Private Endpoints. Both are used to restrict access to PaaS serviced, but work differently. The video gives an overview if the differences and then does a walkthrough of deploying Service Endpoints and Private Endpoints using an Azure Storage account as an example.Continue reading “Azure Virtual Networking Service Endpoints and Private Endpoints”
This video demonstrates how to automatically sync Blob files in Azure Storage to a local file system. I show how to configure Event Grid to trigger a webhook that starts a runbook in Azure Automation when a new file is added to Azure Blob Storage. The Runbook runs on a Hybrid Worker and downloads the file from Azure Storage to a local file system.Continue reading “Copy Blob Files Local with Event Grid and Azure Automation”
A Content Delivery Network, or CDN, is a globally distributed network for delivering, well, content. Content can include images, videos, CSS and any other asset used for providing web services. The advantages to a CDN include: caching data closer to the users to increase web site performance, improving reliability by leveraging a global caching network and reducing bandwidth by shifting traffic to the CDN.Continue reading “How to configure an Azure CDN”
My head is still swimming from all the information at Microsoft Ignite this year. In this post I’m going over three reoccurring topics that makes managing and compliance of an Azure environment easier. These are Management Groups, Policies and Blueprints.
The only constant is change. I noticed some new information came out this month while working on a project that requires encrypting disks. This information significantly changes how Azure Disk Encryption can be applied to Windows and Linux VM’s. This is an update to my previous article on Azure Disk Encryption with the intention of outlining the new, easier method of encrypting Azure disks. Continue reading “Azure Disk Encryption, V2”
I worked on a project recently that wrote data from PowerShell into a CSV file. The goal was to do real time trending based on the output, but I ran into an issue with file locks as PowerShell and the other program competed for access to the CSV. That’s when I got the idea to write to Azure Table Storage instead of to a CSV. The project didn’t work out for other reasons, but I did work out how to write data into Azure Table Storage instead from PowerShell. This post is about how I did that. Continue reading “Write Data from PowerShell to Azure Table Storage”
As of today, Microsoft has a few different ways of encrypting Azure data. The options for Azure Data Encryption on servers include Storage Service Encryption and Azure Disk Encryption. Below is a quick summery of each.
Storage Service Encryption (SSE)
This is at the storage account level and encrypts data at rest. Encryption takes place as the data is written to storage and decrypted when it’s read. Continue reading “Azure Data Encryption”