Azure Storage Accounts Explained
Master Azure Blob, File, Queue, and Table storage — understand when to use each and how to secure them.
“Welcome back to the Azure Fundamentals series. In this video we're diving deep into Azure Storage — one of the most used services in the entire Azure platform. Every application needs somewhere to store data, and Azure gives you four powerful storage types to choose from. By the end of this video you'll know exactly which one to use and when.”
“An Azure Storage Account is your entry point to Azure Storage. Think of it as a top-level namespace — a unique address in Azure where all your storage data lives. Under one storage account you can have blob containers, file shares, queues, and tables. Everything is accessible via a secure URL, from anywhere in the world.”
“Blob Storage is designed for unstructured data — anything that doesn't fit neatly into a table. Images, videos, PDFs, log files, backups — all perfect for Blob. The three access tiers let you optimize cost: Hot for data you access daily, Cool for monthly access, and Archive for long-term compliance data you might need once a year. Azure CDN can sit in front of Blob to serve content globally at low latency.”
“Azure File Storage gives you a network file share in the cloud — just like the shared drives you use in corporate environments, but fully managed by Microsoft. You can mount it directly as a drive letter on Windows or a mount point on Linux. This is especially powerful for lift-and-shift migrations — if your on-premises app writes to a file share, Azure Files lets you move to the cloud without changing your application code.”
“Queue Storage is all about decoupling. Imagine a web app that receives customer orders. Instead of processing each order synchronously — which could slow down or crash under load — the web app drops a message into a queue and returns immediately. A separate worker service picks up messages from the queue and processes them at its own pace. This pattern makes your architecture resilient, scalable, and fault-tolerant.”
“Table Storage is a NoSQL key-value store — great when you need to store large amounts of structured data without the overhead of a relational database. It's schema-less, meaning each row can have different columns. You query data by a partition key and row key, which makes lookups extremely fast. For high-volume, low-cost scenarios like IoT telemetry or user activity logs, Table Storage is often the right choice.”
“Azure automatically replicates your storage data to protect against failures. LRS keeps three copies within a single datacenter — cheapest option, but vulnerable to a datacenter outage. ZRS spreads copies across three availability zones in the same region. GRS replicates to a secondary region hundreds of miles away. For mission-critical data, GZRS combines zone redundancy with geo-replication — that's six copies across two regions. Always match redundancy to your recovery requirements.”
“Security is critical for storage. Access keys give full control — treat them like passwords, store them in Azure Key Vault, and rotate them regularly. Shared Access Signatures are much safer for granting external access — you can limit them to specific containers, specific operations, and set an expiry time. For internal services, use Azure Active Directory with RBAC — no keys to manage. And for sensitive data, use private endpoints so traffic never leaves the Azure backbone network.”
“When creating a storage account, you choose between Standard and Premium performance tiers. Standard GPv2 supports all four storage types and is the right choice for most applications — it's cost-effective and flexible. Premium options use SSDs for ultra-low latency. Premium Block Blobs are for scenarios like streaming analytics or ML data ingestion where you need sub-millisecond response times. VM Managed Disks are actually Premium Page Blobs under the hood.”
“Let's see this in action. I'll create a storage account from scratch, upload an image to a blob container, make it publicly accessible, and then show you where to find your access keys and how to generate a SAS token. These are the everyday operations you'll do as an Azure developer or administrator.”
“Let me give you a quick decision framework. Need to store files users upload? Blob. Need a shared network drive for your VMs? Files. Building a background job processing pipeline? Queue. Need a fast, cheap NoSQL store for structured records? Table. In practice, most applications use Blob Storage for assets and either a database or Table Storage for structured data. Understanding these boundaries will serve you well in both certifications and real-world architecture.”
“Excellent work. You now understand all four Azure storage types, when to use each, how redundancy works, and how to secure your storage accounts. These concepts apply directly to the AZ-900 and AZ-104 certifications. Next video we're going deeper into Azure Networking — Virtual Networks, Subnets, Network Security Groups, and how to connect your resources securely. See you there.”
- 1Go to Azure Portal → Create a resource → Storage account
- 2Choose resource group, region, redundancy (LRS vs GRS)
- 3Navigate to Containers → create a blob container
- 4Upload a file and change access level to Blob (public read)
- 5Show the public URL of the uploaded blob
- 6Navigate to File shares → create a share and upload a file
- 7Show Storage Explorer in the portal
- 8Navigate to Access keys and Connection strings