Introduction

To pass the AZ-104 exam, you must complete several live online lab tests. This article will guide you through connecting to a blob storage service via a service endpoint. We will continue from our previous lab tutorial, building on the foundational knowledge you've already acquired.

Virtual Network Service Endpoints

Virtual Network (VNet) service endpoints provide secure and direct connectivity to Azure services over an optimized route on the Azure backbone network. By enabling service endpoints, you can secure your critical Azure service resources to only your virtual networks, enhancing both security and performance. For more information, refer to the Azure Virtual Network Service Endpoints Overview.

Steps

Step 1
Navigate to the "Virtual network" of RGroup1.

Step 2
Click on Service endpoints, then click Add.

Step 3
In the "Add service endpoints" dialog:
Select "Microsoft.Storage" as the Service.
Select "default" for Subnets.
Click "Add".

Step 4
Navigate to Storage accounts and select "davidaystorageaccount". Then, click on Networking.

Step 5
Under "Public network access," select "Enabled from selected virtual networks and IP addresses".

Click "+ Add existing virtual network" and select "VM1-vnet" for Virtual networks.

Click "Add your client IP address ('xxx.xxx.xxx.xxx')" for the firewall if necessary.

Click "Save".

Testing

Access https://davidaystorageaccount.blob.core.windows.net/folder1/hello_david.jpg from your local PC.
Result: AuthorizationFailure

Access https://davidaystorageaccount.blob.core.windows.net/folder1/hello_david.jpg from VM1 which is inside "VM1-vnet".

Result: OK

Conclusion

By following these steps, you have successfully configured a service endpoint for your Azure Storage account. This setup ensures that only requests originating from your specified virtual network can access the storage resources, enhancing security. The testing results confirm the effectiveness of this configuration: access from your local machine was denied, while access from the designated virtual machine was successful. This practical experience is essential for your preparation for the AZ-104 exam, reinforcing the importance of understanding Azure networking and security features. Continue practicing these labs to solidify your knowledge and improve your confidence in managing Azure resources.