Azure Storage / Journey
All animations ↗
The Azure Storage journey · animated

Store it. Protect it. Share it.

Three short, animated explainers take Azure Storage from a single account, to bulletproof durability, to sharing data securely — no wall of docs.

3animated explainers
Blob·Queue·Table·Filesone account, four services
11–16nines of durability

Three explainers, one journey

Follow them in order for the full picture, or jump straight to the one you need — each is a complete, self-contained story.

01 Store · 02 Protect · 03 Share
01 Store itThe foundation
onestorageaccountStandard
Blob
Files
Queue
Table
HotCoolColdArchive

The Storage Account

One resource holds it all — Blob, Queue, Table and Files — with access tiers from Hot to Archive (and Smart), and Standard vs Premium performance.

4 data servicesAccess tiersStandard / Premium
Start explainer 01 →
02 Protect itDurability
Primary region
Secondary region
LRS · ZRS · GRS · GZRS

Storage Redundancy

How Azure keeps your data safe — copies spread across drives, zones and regions, plus failover and read-access (RA-) options.

LRS · ZRS · GRS · GZRS11–16 ninesFailover
Start explainer 02 →
03 Share itSecure access
🔑
…/share?sp=r&se=2h&spr=https&sig=
🔒 HTTPS only⏱ expires♻ revocable

SAS Tokens & Stored Access Policy

Share storage securely with a signed, scoped, expiring token — the three SAS types, the services and scopes they cover, stored access policies, and how to revoke.

SAS typesStored access policyRevocation
Start explainer 03 →

Level up — for developers & AI engineers

Go beyond the basics: secure access, networking, data protection, event-driven apps, and storage for AI. New explainers land here as they ship.

04 🪪

Identity & RBAC

Access without keys — managed identities, Microsoft Entra ID, data-plane roles, scope & least privilege, and disabling Shared Key.

Managed identityData-plane rolesLeast privilege
05 🔒

Network security & Private Link

Firewall default-deny, service endpoints, private endpoints (Private Link), private DNS, and disabling public access.

Private endpointFirewallPrivate DNS
06 🛡️

Data protection & encryption

Soft delete, versioning, point-in-time restore, immutability (WORM), and SSE / customer-managed keys.

Soft deleteVersioningWORM · CMK
07

Build with storage

SDK + DefaultAzureCredential + Azurite, event-driven blobs (Event Grid → Functions), and the change feed.

Azure SDKAzuriteEvent Grid → Functions
08 ♻️

Move & optimize data

Access tiers, lifecycle auto-tiering, object replication (source → dest), AzCopy, and blob inventory.

Access tiersLifecycleObject replication
09 🤖

Storage for AI

ADLS Gen2, Blob as RAG grounding, AI Search indexers, Foundry “on your data” — and where vectors actually live.

ADLS Gen2RAG groundingVectors in the index
Official · Microsoft Learn

Ready to get hands-on?

Take the free, official Microsoft Learn learning path Store data in Azure — guided modules and knowledge checks that turn what you just watched into real skills.

Start the learning path ↗