Study/AZ-104-MicrosoftAzureAdministrator
1
0
Fork 0
mirror of https://github.com/MicrosoftLearning/AZ-104-MicrosoftAzureAdministrator.git synced 2026-02-05 16:19:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update cindyLab07.md

Browse Source
This commit is contained in:
staleycyn 2023-12-10 12:01:03 -08:00 committed by GitHub
parent 03ff904fdc
commit aa9e2503d0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
New Instructions/Lab/cindyLab07.md
View File

@ -72,8 +72,9 @@ In this task, you will create and configure a storage account.
+ **Name** the rule `Movetocool`. Notice your options for limiting the scope of the rule.
+ On the **Base blobs** tab, if based blobs were last modified more than `30 days` ago then **move to cool storage**.
+ Notice you can configure other conditions. Select **Add** when you are ready to create the rule.
![image](../media/az104-lab07-mvoetocool.png)
![Screenshot move to cool rule conditions.](../media/az104-lab07-movetocool.png)
## Task 2: Manage blob storage
@ -81,6 +82,8 @@ In this task, you will create a blob container and upload a blob into it. Blob c
1. Continue working with your storage account.
### Create a blob container and a time-based retention policy
1. In the **Data storage** section, click **Containers**.
1. Click **+ Container** and **Create** a container with the following settings:
@ -92,6 +95,19 @@ In this task, you will create a blob container and upload a blob into it. Blob c
![image](../media/az104-lab07-create-container.png)
1. Select your container and in the **Sectings** section, select **Access Policy**.
1. In the **Immutable blob storage** area, select **Add policy**.
| Setting | Value |
| --- | --- |
| Policy type | **Time-based retention** |
| Set retention period for | `90` days |
1. Select **Save**.
### Manage blob uploads
1. Select your **data** container and then click **Upload**.
1. On the **Upload blob** blade, expand the **Advanced** section.
@ -120,13 +136,9 @@ In this task, you will create a blob container and upload a blob into it. Blob c
> **Note**: This is expected, since the container you created has the public access level set to **Private (no anonymous access)**.
## Task 3: Provide limited access to blob storage.
### Configure limited access to the blob storage
In this task, you will configure limited access to the blob storage.
1. Return to your **data** container and select your upload file.
1. Use the ellipses on the right side to select **Generate SAS**. Specify the following settings (leave others with their default values):
1. Return to your uploaded file and select the **Generate SAS** tab. Specify the following settings (leave others with their default values):
| Setting | Value |
| --- | --- |
@ -146,34 +158,6 @@ In this task, you will configure limited access to the blob storage.
> **Note**: You should be able to view the content of the file by downloading it and opening it with Notepad. If you receive a Windows SmartScreen error, continue to the page.
> **Note**: Save the blob SAS URL. You will need it later in this lab.
1. Close the InPrivate mode browser window, return to the browser window showing the **licenses/LICENSE** blade of the Azure Storage container, and from there, navigate back to the **data** blade.
1. Click the **Switch to the Azure AD User Account** link next to the **Authentication method** label.
> **Note**: You can see an error when you change the authentication method (the error is *"You do not have permissions to list the data using your user account with Microsoft Entra ID"*). It is expected.
> **Note**: At this point, you do not have permissions to change the Authentication method.
![image](./media/az104-lab07-storage-error.png)
1. On the **data** blade, click **Access Control (IAM)**.
1. On the **Check access** tab, click **Add role assignment**.
1. On the **Add role assignment** blade, specify the following settings:
| Setting | Value |
| --- | --- |
| Role | **Storage Blob Data Owner** |
| Assign access to | **User, group, or service principal** |
| Members | the name of your user account |
1. Click **Review + Assign** and then **Review + assign**, and return to the **Overview** blade of the **data** container and verify that you can change the Authentication method to (Switch to Azure AD User Account).
> **Note**: It might take about 5 minutes for the change to take effect.
## Task 5: Create and configure an Azure Files shares
In this task, you will create and configure Azure Files shares. Azure File Shares allow you to interact with Azure storage using either SMB or NFS protocols. You will then map a network drive from the VM that you deployed to the file share that you create.