Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
4.2.3. Azure Files and Blob Storage Security
💡 First Principle: Different storage types have different access methods. Azure Files supports SMB/NFS protocols; Blob Storage supports REST APIs. Each has specific security considerations.
Azure Files Authentication
| Protocol | Authentication Options |
|---|---|
| SMB | Microsoft Entra Domain Services, on-premises AD DS, storage key |
| NFS | Virtual network controls (no user authentication) |
Blob Storage Public Access
| Setting | Effect |
|---|---|
| Storage account: Allow Blob public access | Master switch for the account |
| Container: Public access level = Blob | Anonymous read for blobs only |
| Container: Public access level = Container | Anonymous read for container and blobs |
| Container: Public access level = Private | No anonymous access |
⚠️ Exam Trap: Setting container access to "Blob" when trying to follow least privilege. For public anonymous access to a single file, "Blob" level is more restrictive than "Container" level—"Container" allows listing all blobs.
Written byAlvin Varughese
Founder•15 professional certifications