Service Endpoints and Securing Storage

About this guide

Lab Scenario

You have been asked to create a proof of concept to demonstrate securing Azure file shares. Specifically, you want to:

• Create a storage endpoint so traffic destined to Azure Storage always stays within the Azure backbone network.
• Configure the storage endpoint so only resources from a specific subnet can access the storage.
• Confirm that resources outside of the specific subnet cannot access the storage.

Lab Objectives

Exercise 1: Service endpoints and security storage

• Task 1: Create a virtual network
• Task 2: Add a subnet to the virtual network and configure a storage endpoint
• Task 3: Configure a network security group to restrict access to the subnet
• Task 4: Configure a network security group to allow RDP on the public subnet
• Task 5: Create a storage account with a file share
• Task 6: Deploy virtual machines into the designated subnets
• Task 7: Test the storage connection from the private subnet to confirm that access is allowed
• Task 8: Test the storage connection from the public subnet to confirm that access is denied

Service Endpoints and Securing Storage Diagram

Job Skills

The Cloudguides in this series help IT professionals gain practical skills related to making Microsoft Azure environments more secure, including how to implement security controls, manage identity and access, protect data and applications, monitor for threats, and maintain a secure posture across various Azure services.

Career Connections

With the increasing demand for cybersecurity expertise, professionals with the skills from this series can pursue job prospects in roles such as Cloud Security Engineer, Security Analyst, Azure Security Consultant, Security Administrator, and Compliance Manager.

As of 2025, average U.S. salaries range from $103,197 to $143,002 for entry-level roles and $120,201 to $203,652 for professionals with 5 years' experience across positions like Cloud Security Engineer, Security Analyst, Azure Security Consultant, Security Administrator, and Compliance Manager. Please note that these figures are approximate, derived from online sources, and can vary based on factors such as location, industry, and company size.