AZ-1003: Secure storage for Azure Files and Azure Blob Storage

Course Description

Protect your cloud data by mastering secure storage for Azure Files and Azure Blob Storage. This one-day, intermediate instructor-led course teaches IT professionals how to architect, configure, and secure unstructured data in Azure. Through expert-led lectures and real-world scenarios, you’ll learn to use encryption, access control, network isolation, lifecycle management, and redundancy to ensure data integrity and compliance.

Target Audience

This course is ideal for:

• Azure Administrators, Cloud Engineers, Security Professionals, and IT Operators responsible for implementing secure storage solutions in Azure

• Professionals managing file and blob data, encryption, access controls, and network configurations

Prerequisites:

• Familiarity with the Azure portal, storage accounts, and networking fundamentals (VNets, NSGs, service endpoints) 

Course Outline

Module 1: Create an Azure Storage Account

• Choose appropriate storage account options and redundancy

• Implement secure storage configurations from the outset

Module 2: Configure Azure Blob Storage

• Set up blob containers, access tiers, and replication

• Apply blob lifecycle management policies to optimize security and cost 

Module 3: Configure Azure Files

• Design secure Azure Files shares with snapshots and soft-delete

• Use Azure File Sync for resilient file storage across environments 

Module 4: Configure Azure Storage Security

• Implement shared access signatures (SAS), encryption at rest, and customer-managed keys

• Define storage-level access policies and security best practices 

Module 5: Secure and Isolate Storage with Networking

• Control storage access using NSGs, VNet service endpoints, and private endpoints

• Integrate firewall rules to ensure network-level isolation and protection 

Module 6: Guided Integration Project

• Apply security best practices in a comprehensive scenario

• Combine storage account configuration, blob and file setup, encryption, and network isolation 

HandsOn Experience

Approximately 40–50% of the class is dedicated to hands-on configuration and guided demos. You’ll practice building and securing Azure Files and Blob Storage using real-world scenarios.

Skills You’ll Gain

By completing AZ1003, you will be able to:

• Provision and configure secure storage accounts for files and blobs

• Implement blob lifecycle management and tiering

• Secure file shares with snapshots, sync, and soft-delete

• Enforce encryption, SAS tokens, and customer-managed keys

• Isolate storage access using NSGs, firewalls, service and private endpoints