Holding data.
WHAT STORAGE TYPES EXIST
Object storage, for unstructured data and files File shares, accessible by standard protocols Disks, attached to virtual machines Queues, for messages Tables, for simple structured data
WHAT ACCESS TIERS PROVIDE
Different costs for data accessed frequently, rarely, or almost never.
WHAT THAT MEANS
Storing archives in the wrong tier is substantially more expensive.
WHAT TO CONFIGURE
Lifecycle rules moving data to cheaper tiers automatically.
WHAT REDUNDANCY OPTIONS PROVIDE
Copies within a datacentre, across a region, or across regions.
WHAT TO CHOOSE
According to how damaging loss would be, and the cost.
WHAT TO SECURE
Access keys, which grant full access Public access settings, which are a common exposure Network restrictions
WHAT TO PREFER OVER KEYS
Identity-based access, where the service authenticates rather than holding a key.
WHY
Keys are shared, copied and rarely rotated.
WHAT TO NEVER DO
Leave containers publicly readable unintentionally.
WHY
It is a frequent cause of data exposure, and it is scanned for.
WHAT TO MONITOR
Capacity, cost and access patterns.
