{"id":795,"date":"2024-06-28T12:00:27","date_gmt":"2024-06-28T12:00:27","guid":{"rendered":"https:\/\/virtualall.sk\/?p=795"},"modified":"2026-09-11T14:45:28","modified_gmt":"2026-09-11T14:45:28","slug":"azure-storage-account-a-ako-ho-zabezpecit","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2024\/06\/azure-storage-account-a-ako-ho-zabezpecit\/","title":{"rendered":"Azure Storage Account Security"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Azure Storage Account je z\u00e1kladn\u00e1 jednotka \u00falo\u017eiska v Azure, ktor\u00e1 poskytuje \u0161k\u00e1lovate\u013en\u00e9, vysoko dostupn\u00e9 a bezpe\u010dn\u00e9 \u00falo\u017eisko pre r\u00f4zne typy d\u00e1t. Tento \u00falo\u017en\u00fd \u00fa\u010det podporuje nieko\u013eko typov \u00falo\u017eiska, vr\u00e1tane blob \u00falo\u017eiska, s\u00faborov\u00e9ho \u00falo\u017eiska a tabuliek.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Na\u010do Slu\u017e\u00ed \u0160ifrovanie<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0160ifrovanie je k\u013e\u00fa\u010dov\u00fdm mechanizmom na ochranu d\u00e1t pred neopr\u00e1vnen\u00fdm pr\u00edstupom. Pom\u00e1ha zabezpe\u010di\u0165, \u017ee va\u0161e d\u00e1ta s\u00fa bezpe\u010dn\u00e9 po\u010das prenosu aj v pokoji, a z\u00e1rove\u0148 spl\u0148uje r\u00f4zne bezpe\u010dnostn\u00e9 a regula\u010dn\u00e9 po\u017eiadavky. Azure Storage Account vyu\u017e\u00edva \u0161ifrovanie na zabezpe\u010denie d\u00e1t tak, aby ich mohli \u010d\u00edta\u0165 iba autorizovan\u00ed pou\u017e\u00edvatelia alebo aplik\u00e1cie.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ako Zabezpe\u010di\u0165 Azure Storage Account<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Existuje nieko\u013eko krokov a postupov, ako zabezpe\u010di\u0165 v\u00e1\u0161 Azure Storage Account:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Pou\u017e\u00edvanie \u0160ifrovania<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Storage Account automaticky \u0161ifruje v\u0161etky d\u00e1ta ulo\u017een\u00e9 v \u00falo\u017eisku. Toto \u0161ifrovanie m\u00f4\u017ee by\u0165 spravovan\u00e9 Microsoftom alebo z\u00e1kazn\u00edkom.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">a) Microsoft Managed Keys (MMK)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Toto je predvolen\u00e1 mo\u017enos\u0165 \u0161ifrovania, kde Azure automaticky spravuje \u0161ifrovacie k\u013e\u00fa\u010de. Pou\u017e\u00edvate\u013e nemus\u00ed robi\u0165 \u017eiadne dodato\u010dn\u00e9 nastavenia.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">b) Customer Managed Keys (CMK)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Toto umo\u017e\u0148uje z\u00e1kazn\u00edkom spravova\u0165 vlastn\u00e9 \u0161ifrovacie k\u013e\u00fa\u010de pomocou Azure Key Vault. M\u00f4\u017eete vytv\u00e1ra\u0165, spravova\u0165 a rotova\u0165 k\u013e\u00fa\u010de pod\u013ea vlastn\u00fdch bezpe\u010dnostn\u00fdch po\u017eiadaviek.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. \u0160ifrovanie po\u010das prenosu (Encryption in Transit)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Storage podporuje \u0161ifrovanie d\u00e1t po\u010das prenosu pomocou protokolov TLS (Transport Layer Security). Pou\u017eitie HTTPS je vy\u017eadovan\u00e9 na zabezpe\u010denie \u0161ifrovan\u00e9ho prenosu d\u00e1t medzi klientmi a Azure Storage slu\u017ebami, \u010d\u00edm sa ochr\u00e1ni pred \u00fatokmi typu man-in-the-middle.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Infrastrukt\u00farne \u0161ifrovanie<\/strong>&nbsp;je dodato\u010dn\u00e1 vrstva \u0161ifrovania pon\u00fakan\u00e1 Azure Storage na zv\u00fd\u0161enie bezpe\u010dnosti va\u0161ich d\u00e1t. T\u00e1to funkcia \u0161ifruje d\u00e1ta na \u00farovni infra\u0161trukt\u00fary, \u010d\u00edm poskytuje dvojit\u00e9 \u0161ifrovanie v kombin\u00e1cii s predvolen\u00fdm \u0161ifrovan\u00edm v pokoji.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">K\u013e\u00fa\u010dov\u00e9 body o infrastrukturnom \u0161ifrovan\u00ed:<\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Dvojit\u00e9 \u0161ifrovanie:<\/strong>\u00a0Infrastrukt\u00farne \u0161ifrovanie prid\u00e1va druh\u00fa vrstvu \u0161ifrovania k d\u00e1tam, \u010d\u00edm ich e\u0161te viac zabezpe\u010duje proti neopr\u00e1vnen\u00e9mu pr\u00edstupu.<\/li>\n\n\n\n<li><strong>Automatick\u00e9 riadenie:<\/strong>\u00a0Obe vrstvy \u0161ifrovania (infrastrukt\u00farna a predvolen\u00e1 \u0161ifrovanie v pokoji) s\u00fa spravovan\u00e9 spolo\u010dnos\u0165ou Microsoft, \u010do zni\u017euje zlo\u017eitos\u0165 pre pou\u017e\u00edvate\u013eov.<\/li>\n\n\n\n<li><strong>S\u00falad a bezpe\u010dnos\u0165:<\/strong>\u00a0T\u00e1to funkcia pom\u00e1ha splni\u0165 pr\u00edsne regula\u010dn\u00e9 po\u017eiadavky a zvy\u0161uje ochranu d\u00e1t poskytovan\u00edm viacer\u00fdch vrstiev \u0161ifrovania.<\/li>\n\n\n\n<li><strong>Transparentn\u00e9 pre pou\u017e\u00edvate\u013eov:<\/strong>\u00a0Dodato\u010dn\u00e1 vrstva \u0161ifrovania sa aplikuje automaticky a je transparentn\u00e1 pre pou\u017e\u00edvate\u013eov, \u010do znamen\u00e1, \u017ee nie je potrebn\u00e1 \u010fal\u0161ia konfigur\u00e1cia alebo spr\u00e1va zo strany pou\u017e\u00edvate\u013eov.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\">Ako funguje infrastrukturne \u0161ifrovanie:<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Prv\u00e1 vrstva:<\/strong>\u00a0Predvolen\u00e9 \u0161ifrovanie v pokoji, ktor\u00e9 pou\u017e\u00edva bu\u010f Microsoft Managed Keys (MMK) alebo Customer Managed Keys (CMK).<\/li>\n\n\n\n<li><strong>Druh\u00e1 vrstva:<\/strong>\u00a0Infrastrukt\u00farne \u0161ifrovanie prid\u00e1va \u010fal\u0161iu vrstvu \u0161ifrovania na u\u017e \u0161ifrovan\u00e9 d\u00e1ta pomocou k\u013e\u00fa\u010dov spravovan\u00fdch spolo\u010dnos\u0165ou Microsoft.<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">V\u00fdhody:<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Zv\u00fd\u0161en\u00e1 bezpe\u010dnos\u0165:<\/strong>\u00a0Pridan\u00edm extra vrstvy \u0161ifrovania poskytuje robustnej\u0161iu ochranu proti hrozb\u00e1m.<\/li>\n\n\n\n<li><strong>S\u00falad:<\/strong>\u00a0Pom\u00e1ha organiz\u00e1ci\u00e1m splni\u0165 regula\u010dn\u00e9 a pr\u00e1vne po\u017eiadavky, ktor\u00e9 vy\u017eaduj\u00fa viac vrstiev \u0161ifrovania.<\/li>\n\n\n\n<li><strong>Spravovan\u00e9 spolo\u010dnos\u0165ou Microsoft:<\/strong>\u00a0Zjednodu\u0161uje proces spr\u00e1vy \u0161ifrovania, preto\u017ee obe vrstvy \u0161ifrovania s\u00fa riaden\u00e9 Azure.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Infrastrukt\u00farne \u0161ifrovanie je obzvl\u00e1\u0161\u0165 u\u017eito\u010dn\u00e9 pre organiz\u00e1cie s vysok\u00fdmi bezpe\u010dnostn\u00fdmi a regula\u010dn\u00fdmi po\u017eiadavkami, \u010d\u00edm zais\u0165uje, \u017ee ich d\u00e1ta zostan\u00fa chr\u00e1nen\u00e9 aj v pr\u00edpade, \u017ee by jedna vrstva \u0161ifrovania bola ohrozen\u00e1.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Nasadenie<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nastavenie \u0161ifrovania v storage account je potrebn\u00e9 vykona\u0165 na novej in\u0161tancii. Na in\u0161tal\u00e1ciu je potrebn\u00e9 ma\u0165 nasaden\u00fd Key Vault, ktor\u00fd zabezpe\u010duje ulo\u017eenie s\u00fakromn\u00fdch k\u013e\u00fa\u010dov, pomocou ktor\u00fdch sa bude dan\u00e9 \u00falo\u017eisko \u0161ifrova\u0165.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Architekt\u00fara:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"390\" height=\"210\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/azure-storage-encription.drawio.png\" alt=\"V\u00fdhody:\" class=\"wp-image-799\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/azure-storage-encription.drawio.png 390w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/azure-storage-encription.drawio-300x162.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/azure-storage-encription.drawio-18x10.png 18w\" sizes=\"auto, (max-width: 390px) 100vw, 390px\" \/><\/figure>\n<\/div>\n\n\n<ol class=\"wp-block-list\">\n<li>Vytvorenie k\u013e\u00fa\u010dov potrebn\u00fdch na \u0161ifrovanie<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"472\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-3-1024x472.png\" alt=\"V\u00fdhody: (2)\" class=\"wp-image-802\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-3-1024x472.png 1024w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-3-300x138.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-3-768x354.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-3-1536x708.png 1536w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-3-18x8.png 18w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-3.png 1553w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"472\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-4-1024x472.png\" alt=\"V\u00fdhody: (3)\" class=\"wp-image-803\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-4-1024x472.png 1024w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-4-300x138.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-4-768x354.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-4-1536x708.png 1536w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-4-18x8.png 18w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-4.png 1553w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">V tejto \u010dasti je potrebn\u00e9 definova\u0165 n\u00e1zov dan\u00e9ho k\u013e\u00fa\u010da a ve\u013ekos\u0165 k\u013e\u00fa\u010da, ktor\u00fd bude vytvoren\u00fd.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Vytvorenie k\u013e\u00fa\u010dov pri in\u0161tal\u00e1cii storage account (t\u00fato mo\u017enos\u0165 nie je mo\u017en\u00e9 nesk\u00f4r zmeni\u0165)<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"472\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-5-1024x472.png\" alt=\"V\u00fdhody: (4)\" class=\"wp-image-804\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-5-1024x472.png 1024w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-5-300x138.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-5-768x354.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-5-1536x708.png 1536w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-5-18x8.png 18w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-5.png 1553w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"472\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-6-1024x472.png\" alt=\"V\u00fdhody: (5)\" class=\"wp-image-805\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-6-1024x472.png 1024w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-6-300x138.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-6-768x354.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-6-1536x708.png 1536w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-6-18x8.png 18w, https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/06\/image-6.png 1553w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Pre zapnutie \u0161ifrovania je potrebn\u00e9 vybra\u0165 vytvoren\u00fd k\u013e\u00fa\u010d v pr\u00edslu\u0161nom Key Vault serveri.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">S\u00favisiace n\u00e1vody<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><a href=\"https:\/\/virtualall.sk\/2024\/02\/azure-office-365-data-security-purview-part-2\/\">Azure Purview Data Security<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2024\/02\/azure-office-365-data-security-part-1\/\">Azure Office 365 Data Security<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2023\/12\/dlp-ochrana-dat-v-prostredi-azure-part1\/\">DLP ochrana d\u00e1t v Azure<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2023\/12\/azure-cloud-blob-storage-ochrana-voci-ransomware\/\">Azure Blob Storage ochrana pred ransomware<\/a><\/li>\n\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Azure Storage Account poskytuje \u0161k\u00e1lovate\u013en\u00e9, vysoko dostupn\u00e9 a bezpe\u010dn\u00e9 \u00falo\u017eisko pre r\u00f4zne typy d\u00e1t. \u0160ifrovanie zabezpe\u010duje ochranu d\u00e1t pred neopr\u00e1vnen\u00fdm pr\u00edstupom. Pou\u017e\u00edva \u0161ifrovanie v pokoji (MMK a CMK) a po\u010das prenosu (TLS). Spr\u00e1va pr\u00edstupov\u00fdch pr\u00e1v cez Azure AD a monitorovanie pr\u00edstupu zvy\u0161uj\u00fa celkov\u00fa bezpe\u010dnos\u0165 \u00falo\u017eiska.<\/p>\n","protected":false},"author":1,"featured_media":796,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[86],"tags":[87,114,112],"class_list":["post-795","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","tag-azure","tag-azure-storage","tag-bezpecnost"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/795","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=795"}],"version-history":[{"count":12,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/795\/revisions"}],"predecessor-version":[{"id":2443,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/795\/revisions\/2443"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media\/796"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=795"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=795"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=795"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}