# Storage Account

DuploCloud enables users to create Azure Storage Accounts, File Shares, and generate Shared Access Signatures (SAS). Azure Storage Accounts are essential for storing various types of data in the cloud, including blobs (unstructured data), files (managed file shares), queues (messaging), and tables (structured NoSQL data).

In DuploCloud, Storage Accounts are provisioned with the `Standard_LRS` SKU type, which provides locally redundant storage, ensuring high availability and durability by replicating data across multiple physical locations within a region.

For more information about Azure Storage Accounts, refer to the [official Azure documentation](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-overview).

## Creating a Storage Account

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Storage Account**.
2. In the **Name** field, give the Storage Account a name.
3. Optionally, select **Enable** **Anonymous Access** to allow public (unauthenticated) read access to blobs in this storage account, subject to container-level access settings. Enable this option only for non-sensitive content.
4. Click **Create**.

<div align="left"><img src="/files/cDzKByoay1oIXczJpoWW" alt="The Add Storage Account pane"></div>

## Adding Data Storage Sources (Container, File Share, Queue, Table, Private Endpoint, Alerts)

1. Navigate to **Cloud Services** -> **Storage Account**.
2. From the **NAME** column, select the Storage Account to which you want to add a data source.
3. Select the tab for the data storage type you want to add (**Container, File Share, Queue, Table, Private Endpoint, Alerts**).
4. Click **Add**.
5. Enter a name for your data source and additional information as needed.
6. Click **Add**, **Submit**, or **Create**. The data storage source is added to the Storage Account.

<figure><img src="/files/q13OxCSJUa955Cujyg4d" alt=""><figcaption><p>The <strong>Container</strong> tab on the <strong>Storage Accoun</strong>t page</p></figcaption></figure>

## Viewing a Storage Account

To view Storage Account and Endpoint details in the DuploCloud Portal

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Storage Account**.<br>

   <figure><img src="/files/wiozHcSBQoeKhrdqhVER" alt=""><figcaption></figcaption></figure>
2. Select the storage account from the **NAME** column. The Storage Account details page displays.

## Generating a Shared Access Signature (SAS)

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Storage Account.**
2. Select the Storage Account from the **NAME** column.
3. Click on **Actions** -> **Shared Access Signature**. Provide the necessary details as shown below.

<div align="left"><img src="/files/Dj08XP1d1zm01kI9Pz06" alt=""></div>

4. Click **Generate SAS** to generate Shared Access Signature (SAS) tokens.

{% hint style="warning" %}
Copy and paste tokens and URLs into a secure location. These will only be displayed once and cannot be retrieved once the window is closed.
{% endhint %}

## Blocking Public Access to Storage Accounts

Configure Tenant settings to block public network access to Storage Accounts.

1. From the DuploCloud Portal navigation, select **Administrator** -> **Tenants**.
2. Select your Tenant name from the **NAME** column.
3. Select the **Settings** tab, and click **Add**. The **Add Tenant Feature** pane displays.

<div align="left"><figure><img src="/files/KkXMAN5tw52QQaKwQoka" alt="" width="374"><figcaption><p>The <strong>Add Tenant Feature</strong> pane</p></figcaption></figure></div>

4. From the **Select Feature** item list, select **Other**.
5. In the **Configuration** field, enter **block\_public\_network\_to\_azure\_storage**.
6. In the empty field, enter **True.**
7. Click **Add**. Public access to Storage Accounts is blocked.<br>

   <div align="left"><figure><img src="/files/sSqbY63fj2hxsoz7kHpS" alt=""><figcaption><p>The <strong>Settings</strong> tab on the Tenants page in the DuploCloud Portal</p></figcaption></figure></div>

## Creating Private Endpoints

Private endpoints let you access your Azure services over a private IP address within your virtual network, ensuring that traffic does not go over the public internet. See the [Microsoft documentation](https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints) to learn more about private endpoints for Storage Accounts.

1. From the DuploCloud Portal, navigate to **Cloud Services** -> **Storage Account**.
2. From the **NAME** column, select your Storage Account.
3. Select the **Private Endpoint** tab, and click **Add**. The **Add Private Endpoint** pane displays.<br>

   <div align="left"><figure><img src="/files/lbXKc4oGOQoAqoMVl8jP" alt="" width="411"><figcaption><p>The <strong>Add Private Endpoint</strong> pane in the DuploCloud Portal</p></figcaption></figure></div>
4. Enter a name for the endpoint in the **Name** field.
5. From the **Subnet** item list, select your subnet.
6. Select your storage type from the **Storage Type** item list (**Blob**, **File**, etc.).
7. Click **Submit**. The private endpoint is created.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.duplocloud.com/docs/automation-platform/overview-2/azure-services/storage-account.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.