Azure Storage Accounts -- Scott Duffy Course Notes
Exam Weight: 15-20% 18 Lectures Scott Duffy -- UdemyComprehensive notes from Scott Duffy's AZ-104 Udemy course covering Azure Storage Accounts. Every lecture is captured in detail, enriched with diagrams, labs, and Microsoft Learn references.
Course Architecture
txt
direction: right
fundamentals: Storage Account\nFundamentals {
style.fill: "#E8F0FE"
style.stroke: "#0078D4"
}
security: Security &\nAccess Control {
style.fill: "#FFF3E0"
style.stroke: "#FFB900"
}
services: Storage\nServices & Tools {
style.fill: "#E8F5E9"
style.stroke: "#107C10"
}
fundamentals -> security: secured by
security -> services: enables
fundamentals: {
create: 01 - Fundamentals
tiers: 02 - Access Tiers & Cost
network: 03 - Networking
protect: 04 - Data Protection
encrypt: 05 - Encryption
}
security: {
keys: 07 - Access Keys & SAS
policies: 08 - Stored Access Policies
entra: 09 - Entra ID / RBAC
}
services: {
types: 06 - Storage Services
tools: 10 - AzCopy & Tools
files: 11 - Azure File Shares
repl: 12 - Object Replication
}Topic Pages
| # | Topic | Lectures | What You'll Learn |
|---|---|---|---|
| 01 | Storage Account Fundamentals | 1, 2, 3, 8 | Creating accounts, redundancy (LRS/ZRS/GRS/GZRS), advanced options, naming, regions, pricing |
| 02 | Access Tiers & Cost Optimization | 4, 13 | Hot/Cool/Cold/Archive tiers, pricing matrix, lifecycle management policies, breakeven analysis |
| 03 | Networking | 5 | Public vs private access, Microsoft routing, private endpoints, firewall rules |
| 04 | Data Protection | 6 | Soft delete, versioning, change feed, point-in-time restore, immutability |
| 05 | Encryption | 7 | Microsoft-managed vs customer-managed keys, Key Vault, infrastructure encryption |
| 06 | Storage Services | 9 | Blob, Files, Queues, Tables -- types, protocols, use cases |
| 07 | Access Keys & SAS | 10 | Access keys, key rotation, SAS tokens, URL anatomy, revocation |
| 08 | Stored Access Policies | 11 | Named policies, centralized SAS management, revocation without key regeneration |
| 09 | Entra ID Access Control | 12 | Identity-based auth, RBAC roles, disabling keys, container-level permissions |
| 10 | AzCopy & Storage Tools | 15, 16 | AzCopy CLI, Storage Browser, Storage Explorer, SMB mount |
| 11 | Azure File Shares | 17, 18 | File shares, directories, snapshots, backup policies, SMB access |
| 12 | Object Replication | 14 | Cross-account async replication, roll-up patterns, replication rules |
Study Progress
Configure Storage Accounts
- [ ] Create and configure storage accounts (Page 01)
- [ ] Configure Azure Storage redundancy (Page 01)
- [ ] Configure storage account access keys (Page 07)
- [ ] Configure Entra ID authentication for storage (Page 09)
Configure Blob Storage
- [ ] Create and configure containers (Page 06)
- [ ] Configure blob access tiers (Page 02)
- [ ] Configure blob lifecycle management (Page 02)
- [ ] Configure blob versioning (Page 04)
Configure Azure Files
Configure Storage Security
- [ ] Configure shared access signatures (Page 07)
- [ ] Configure stored access policies (Page 08)
- [ ] Configure storage encryption (Page 05)
- [ ] Configure networking and firewalls (Page 03)
Quick Reference Links
- Microsoft Learn: Manage Storage Path
- Azure Storage Documentation
- Azure Blob Pricing Calculator
- AZ-104 Lab 07: Manage Azure Storage
- AZ-104 Tutorial Dojo Cheatsheet
Source: Scott Duffy -- AZ-104 Microsoft Azure Administrator (Udemy)