Zone-Redundant Storage (ZRS) This option can only be used for block blobs in a standard
storage account. It replicates your data across two to three facilities, either within a single region
or across two regions. This provides higher durability than LRS, but ZRS accounts do not have
metrics or logging capability.
Security and Azure Storage
Azure Storage provides a set of security features that help developers build secure applications. You
can secure your storage account by using Role-Based Access Control (RBAC) and Microsoft Azure
Active Directory (Azure AD). You can use client-side encryption, HTTPS, or SMB 3.0 to secure your data
in transit. You can enable Storage Service Encryption, and the Azure Storage service will encrypt data
written to the storage account. OS and Data disks for VMs now have Azure Disk Encryption that can
be enabled. And secure access to the data plane objects (such as blobs) can be granted using a
shared access signature (SAS). Let’s talk a little more about each of these.
For more detail and guidance about any of these security features, please check out the Azure Storage
Security Guide at
https://azure.microsoft.com/documentation/articles/storage-security-guide/
.
Do'stlaringiz bilan baham: |