Configure storage accounts

MS Learn module: Configure storage accounts · Learning objectives: identify features & use cases for storage accounts; select between storage account types and create them; select a replication strategy; configure secure network access to storage endpoints.

Overview (why this module matters)

The storage account is the foundation of Azure Storage — everything else (blobs, files, tables, queues) lives inside one. This module teaches you how to create and configure the container correctly: choosing the kind, performance, redundancy, and network access — decisions that are hard or impossible to change later.

Units / lessons covered

  • Introduction
  • Implement Azure Storage
  • Explore Azure Storage services
  • Determine storage account types (kinds)
  • Determine replication strategies
  • Access storage (endpoints, keys, connection strings)
  • Secure storage endpoints (network rules)
  • Knowledge check / Summary & resources

Key terms / commands

# create a GPv2 storage account
az storage account create -n <sa-name> -g <rg> --kind StorageV2 --sku Standard_LRS
# list account keys / connection string
az storage account show-connection-string -n <sa-name> -g <rg>

Hands-on / what to try

  • Create Standard GPv2, Premium block blob, and Premium file share accounts; compare the kind/sku matrix.
  • Change replication LRS→GRS/RA-GRS and observe endpoints.
  • Lock the account to selected networks and confirm a public request is denied (unless trusted service/SAS).

Exam focus

  • Account name is globally unique; four *.core.windows.net endpoints.
  • Default redundancy = LRS; choose ZRS/GRS/GZRS (async secondary, RA- for read).
  • Kind = service/feature availability; Performance = SSD/haardware · Premium block/file/page variants.
  • Network access is distinct from authentication.

Path MOC · storage-account · redundancy-lrs-zrs-grs · storage-performance · storage-network-rule