A developer at Swiggy hardcodes a storage account access key directly into an application's config file, commits it to a public repository by accident, and within hours automated scanners have found it and started uploading garbage data to the account. This pillar covers how to actually store data in Azure safely and cost-effectively - choosing the right storage type, securing access properly, and avoiding the silent cost creep that comes from never revisiting default settings.
What This Pillar Covers
- Choosing between Blob Storage, Azure Files, Queue Storage, and Table Storage for a given workload
- Selecting the right access tier (Hot, Cool, Archive) to avoid overpaying for rarely-accessed data
- Securing storage access with Shared Access Signatures instead of overly broad Access Keys
- Choosing the correct Managed Disk type (Standard HDD, Standard SSD, Premium SSD, Ultra Disk) for a workload
- Storing secrets, keys, and certificates centrally in Azure Key Vault instead of application code
- Configuring storage replication (LRS, ZRS, GRS) to match actual disaster recovery requirements
- Automating cost savings with Lifecycle Management policies that move aging data to cheaper tiers
Who This Is For
Cloud administrators, backend developers, and DevOps engineers responsible for choosing appropriate storage services, securing sensitive data and credentials, and keeping storage costs proportional to actual access patterns.
Why This Matters in Production
At a media platform like Hotstar, leaving months of old video thumbnails in the Hot access tier instead of Cool or Archive can quietly cost thousands of dollars a month for data nobody has requested in weeks. At a payments company like Razorpay, handing out a full Storage Account Access Key instead of a scoped, time-limited SAS token means a single leaked credential exposes every blob in the account, not just the one file a partner actually needed to read.
Prerequisites
- Completion of Azure Fundamentals and Governance, or equivalent familiarity with Resource Groups and RBAC
- Basic understanding of file systems and network shares
- Familiarity with the Azure CLI for hands-on practice