Specifying security requirements for storage workloads, including Azure Storage

Protecting data and the data life cycle is necessary for all companies utilizing cloud technologies. As discussed in the Specifying security requirements for data workloads, including SQL, Azure SQL Database, Azure Synapse, and Azure Cosmos DB section of this chapter, when discussing securing databases, specifying the proper security requirements is a responsibility that a cybersecurity architect should define for engineers and administrators. Among these requirements, you must include, but are not limited to, the following settings and security features:

• Within Azure Storage, you should turn on soft delete for blob data and file shares. This protects data from accidental deletion and allows deleted items to be recovered.
• Azure Storage provides options to use storage account access with Azure RBAC, but the preferred method would be to utilize Azure AD permissions to access storage account data...