Microsoft Azure portal
Build, manage, and monitor all Azure products in a single, unified console.
Web Resources
Connectivity from IaaS(VM) and PaaS service(ADF) to ADLS account with public network access disabled
In this blog post, we will investigate the impacts of disabling public network access in the storage account and learn how to establish connections to an Azure Data Lake Storage account from both IaaS (Virtual Machine) and PaaS services (Azure Data Factory), when public network access is disabled. Additionally, we will address common troubleshooting issues that may arise due to this configuration.
Introduction
Azure storage accounts provide a scalable and secure way to store and access data in the cloud. This model enables you to control the level of access to your storage accounts that...
Agenda
This article will provide a demonstration on how to utilize either SAS token authentication or managed identity from API Management to make requests to Azure Storage. Furthermore, it will explore and compare the differences between these two options.
Comparision
The choice between Managed Identity and SAS Token depends on factors such as the level of control required, the duration of access, and the specific security requirements of your application. Both options offer different levels of access control and security features for accessing Azure Storage.
Azure Managed Identity...
Scenario: PowerShell script to disable Public Network access for Azure Relay
In today’s azure world, it is always better to do automations rather than do a Manual work. It becomes a headache for all of us to navigate to Azure Portal
Here is the simple way to disable Public Network access by using PowerShell script.
Solution:
Connect-AzAccount
Set-AzContext -SubscriptionId "<Sub ID>"
$accessToken = $(Get-AzAccessToken).Token
$body = '{"location": "xxxxxx","properties": {"publicNetworkAccess": "Disabled","defaultAction": "Deny","virtualNetworkRules": [],"ipRules": []}}' |...
Scenario
Suppose you have a specific requirement wherein the user should not have access to view the File Share, Queue, and Table Storage Services Data. The user should only be able to access and view the containers within the storage account. In this blog, we will delve into the methods and techniques to fulfil this requirement.
Assessment:
Azure Storage provides several predefined roles built-in roles that can be utilized to restrict users from executing certain operations on the Azure Storage Account. However, in order to fulfil the aforementioned requirement, it is necessary to...
The current Service Fabric clusters are currently equipped with the MicrosoftMonitoringAgent (MMA) as the default installation. However, it is essential to note that MMA will be deprecated in August 2024, for more details refer- We're retiring the Log Analytics agent in Azure Monitor on 31 August 2024 | Azure updates | Microsoft Azure. Therefore, if you are currently utilizing MMA, it is imperative to initiate the migration process to AzureMonitoringAgent (AMA).
Installation and Linking of AzureMonitoringAgent to a Log Analytics Workspace:
Create a Log Analytics Workspace (if not...
Background introduction
API Management allow us to import a function app as an API, the UI offers a straightforward process to import the function app as described on this Microsoft public document. However, in this article we want to go beyond and explore what actions are performed in the background, it will allow us to understand the import process better and will help us dealing with issues while importing the function app.
Steps
Please review all the steps carefully, they are executed in the following order.
Note: The easiest way to see these steps is collecting a HAR trace.
1-...
Scenario: PowerShell script to get the total number of partitions in Event Hub Namespace.
You must be wondering how to find out total number of partition count for any Event Hub namespace??
On the Azure portal you can only see partition count per Event Hub Entity level but not Namespace level. It’s tiresome job to manually sum up partition counts of all the entities especially when you have hundreds of event hub entities under the namespace.
Here is a simple way to find out total number of Partitions under Event Hub namespace using PowerShell script.
Solution:
Use below...
In this blog post, I will elaborate on some troubleshooting steps in Azure storage static websites. Azure storage static websites are a feature that allows you to host static content (HTML, CSS, JavaScript, and image files) directly from a storage container named $web. This is a great option for scenarios where you don't need a web server to render content, but you still want to leverage Azure services such as Functions, App Service, or CDN.
However, sometimes you may encounter some issues when setting up or deploying your static website. Here are some common problems and how to solve...
Issue:
Unable to delete Azure EventHub Cluster/Namespace/ Entity from Portal/ PowerShell/ CLI.
Case 1:
When EventHub tier is Premium and you are unable to delete Azure EventHub namespace and getting conflict operation error 409.
Sample error message : "statusMessage":"{\"error\":{\"code\":\"Conflict\",\"message\":\"Namespace provisioning in transition. For more information visit https://aka.ms/eventhubsarmexceptions.
Reason:
The reason for stuck state of EventHub namespace or its provisioning failure is due to a known race condition which initiates between two or more internal...
Object replication asynchronously copies block blobs between a source storage account and a destination account. Because block blob data is replicated asynchronously, the source account and destination account are not immediately in sync. There's currently no SLA on how long it takes to replicate data to the destination account. In some cases, you might need to check the replication status, in this article we will go over the different methods that you can use to check and monitor the object replication status for the storage account.
Using Azure Portal
To check the replication status...
Disclaimer: Please test this solution before implementing it for your critical data.
Scenario:
This article explains step by step procedures to accomplish the requirements in Azure Storage using built in RBAC roles:
Read/Download and write/upload operation for containers and blobs should be allowed for the users.
Delete operations should be restricted.
Pre-Requisites:
Azure Storage GPV2 / ADLS Gen 2 Storage account
Make sure to have enough permissions(Microsoft.Authorization/roleAssignments/write permissions) to assign roles to users , such as Owner or User Access...
When using Azure Cognitive Search to index data from an Azure SQL database, it's important to understand the different authentication methods that can be used to connect to the database. In this blog post, we'll explain the different authentication methods that the Search service can use to access an Azure SQL database.
Authentication Methods in SQL DB
There are several authentication methods that can be used to connect to an Azure SQL database, including:
SQL Authentication
SQL authentication is a method of authentication that uses a username and password to connect to an Azure SQL...
This article describes how to scale up a Service Fabric cluster primary node type with minimal downtime. In-place SKU upgrades are not recommended on Service Fabric cluster nodes, as such operations potentially involve data and availability loss so you can refer below for below method for scaling up a Service Fabric node type.
Note: We will be making use of PowerShell cmdlets for all the changes we are going to perform in the cluster, so in case you want to go with the ARM template approach to add a VMSS you can refer Scale up an Azure Service Fabric primary node type - Azure Service...
Background:
There would be scenarios where Customers would require to find the Storage Account capacity with segregation of soft delete, Version, snapshot and Active data.
Calculate the size of a Blob storage Blob Inventory:
The Azure Storage blob inventory feature provides an overview of your containers, blobs, snapshots, and blob versions within a storage account. Use the inventory report to understand various attributes of blobs and containers such as your total data size, age, encryption status, immutability policy, and legal hold and so on. The report provides an overview of your...
Are you getting 50002 Error or 50008 Error return code in your EventHub? If that’s the case, you are in the right place.
In this documentation, we will go through what these two return codes are and how to prevent your EventHub to throttle.
[50002 Error - ServerBusyException]
Pre-requisite:
Are you getting 50002 Error from your EventHub? Is your Throughput appropriately configured? Is your load evenly distributed across all partitions? If so, keep on scrolling down, as you may find the answer to your problem.
I. What is a Throughput Unit?
The throughput capacity of Event Hubs is...
Service Fabric Explorer (SFX) is an open-source tool for inspecting and managing Azure Service Fabric clusters. Service Fabric Explorer is a desktop application for Windows, macOS and Linux. To launch SFX in a web browser, browse to the cluster's HTTP management endpoint from any browser - for example https://clusterFQDN:19080. Service Fabric explorer may not load for numerous reasons. Most frequent reasons could be access denied while trying to access or unable to choose the right certificate. Following steps provide some useful insights on investigation steps and mitigations to be...
Case: In a situation, you observe your EventHub namespace is still incurring the cost, even though you are not doing any operations (read/write/management) on it and your EventHub namespace has no active EventHub instances present.
Root Cause of the behavior:
At the time of creating the Azure EventHub namespace (Basic/Standard/Premium/Dedicated tier), you may have to give pre-purchased units of capacity in terms of Throughput units/Processing units/Capacity units based on the tier you choose. These pre-purchased units of capacity controls throughput capacity of the EventHub...
Azure cloud service extended support(CSES) is a new Azure Resource Manager based deployment model for Azure Cloud Services product. Cloud Services (extended support) has the primary benefit of providing regional resiliency along with feature parity with Azure Cloud Services deployed using Azure Service Manager. It also offers some ARM capabilities such as role-based access and control (RBAC), tags, policy, and supports deployment templates.
For the classic cloud service, we have Azure DevOps built-in pipeline task Azure Cloud Service Deployment task - Azure Pipelines | Microsoft...
Background
This article describes how to get container level stats in Azure Blob Storage, and how to work with the information provided by blob inventory.
The approach presented here uses Azure Databricks and is most suited to be used in storage accounts with a huge amount of data.
At the end of this article, you would be able to create a script to calculate:
The total number of blobs in the container
The total container capacity (in bytes)
The total number of snapshots in the container
The total container snapshots capacity (in bytes)
The total number of versions in the...
Background:
Many times, we have a requirement to delete the older logs from $logs as the Retention days as it was not supported for ADLS gen2 storage account.
Please note Product team already worked on this fix and in case automatic deletion is not working can follow the below steps
Please refer to article https://docs.microsoft.com/en-us/azure/storage/common/manage-storage-analytics-logs?tabs=azure-portal#modify-log-data-retention-period for more information
Deletion of logs from the $logs can be achieved from the following options
Azure Storage explorer
REST...