Skip to content

Commit b3a5b73

Browse files
brown9804brown9804
authored
Merge pull request #90 from MicrosoftCloudEssentials-LearningHub/HDAP_DataRelated
HDAP Data Related
2 parents 4cf2268 + cf6ddd8 commit b3a5b73

File tree

1 file changed

+97
-0
lines changed

1 file changed

+97
-0
lines changed

‎0_Azure/_industry-specific/0_Healthcare/demos/1_HDAP_DataRelated.md‎

Lines changed: 97 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,97 @@
1+
# HDAP Azure Data resources related - Overview
2+
3+
> Housing and Disability Advocacy Program (HDAP)
4+
5+
Costa Rica
6+
7+
[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
8+
[brown9804](https://github.com/brown9804)
9+
10+
Last updated: 2025-03-23
11+
12+
------------------------------------------
13+
14+
<details>
15+
<summary><b>List of References </b> (Click to expand)</summary>
16+
17+
- [About keys - Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys)
18+
- [Key types, algorithms, and operations - Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details)
19+
- [Choose an Azure compute service](https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree)
20+
- [Introduction to Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction)
21+
- [Architecture best practices for Azure Blob Storage](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/azure-blob-storage)
22+
- [SSH File Transfer Protocol (SFTP) support for Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support)
23+
- [Choose an Azure compute service](https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree)
24+
- [Pricing calculator](https://azure.microsoft.com/en-us/pricing/calculator/?msockid=38ec3806873362243e122ce086486339)
25+
26+
</details>
27+
28+
29+
## Azure Key Vault
30+
31+
> `Azure Key Vault` is a cloud service for securely storing and accessing secrets, such as API keys, passwords, certificates, and cryptographic keys.
32+
33+
> [!NOTE]
34+
> Azure Key Vault is essential for HDAP (Housing and Disability Advocacy Program) as it securely stores and manages sensitive information like API keys, passwords, and certificates. It supports different key types and protection methods, ensuring robust security. It uses Microsoft Entra ID (formerly Azure Active Directory) for authentication and role-based access control (RBAC), providing detailed logs and configurable alerts for monitoring access and usage.
35+
36+
| Feature | Description |
37+
|---------|-------------|
38+
| **Key Management** | - Supports RSA (Rivest-Shamir-Adleman), EC (Elliptic Curve), and symmetric keys. <br/> - RSA keys can be up to 4096 bits. <br/> - EC keys support various curves like P-256, P-384, and P-521. <br/> - Keys can be software-protected or HSM (Hardware Security Module)-protected. <br/> - Managed HSMs provide single-tenant, highly available HSMs for storing high-value keys. |
39+
| **Secrets Management** | - Securely stores secrets like passwords and connection strings. <br/> - Uses Azure Active Directory (AAD) for authentication. <br/> - Role-based access control (RBAC) to manage permissions. |
40+
| **Certificates Management** | - Automates the creation, import, renewal, and deletion of certificates. <br/> - Integrates with Azure services and third-party certificate authorities. |
41+
| **Monitoring and Logging** | - Provides detailed logs of key and secret usage. <br/> - Configurable alerts for monitoring access and usage. |
42+
43+
## Blob Storage
44+
45+
> **Azure Blob Storage** is an object storage solution optimized for storing large amounts of unstructured data.
46+
47+
| Feature | Description |
48+
|---------|-------------|
49+
| **Storage Tiers** | - Hot Tier for frequently accessed data. <br/> - Cool Tier for infrequently accessed data. <br/> - Archive Tier for rarely accessed data. |
50+
| **Data Access** | - Supports HTTP/HTTPS (Hypertext Transfer Protocol/Secure). <br/> - REST (Representational State Transfer) APIs. <br/> - Azure SDKs (Software Development Kits). <br/> - Tools like AzCopy. |
51+
| **SFTP (SSH File Transfer Protocol) Support** | - Allows secure file transfers using the SSH File Transfer Protocol (SFTP). |
52+
| **Scalability and Performance** | - Provides redundancy options like LRS (Locally Redundant Storage), ZRS (Zone Redundant Storage), and GRS (Geo-Redundant Storage). <br/> - Optimized for high throughput and low latency. |
53+
| **Security** | - Data is encrypted at rest and in transit. <br/> - Uses Azure Active Directory (AAD) and shared access signatures (SAS) for fine-grained access control. |
54+
55+
> Steps to configure it:
56+
57+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/486369a7-df77-47bc-b2b7-d2c66c8e9e49" />
58+
59+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/24e89de2-474c-4af2-814a-aa91af2b4e3a" />
60+
61+
## Azure SFTP Server
62+
63+
> **Azure Blob Storage** now supports SFTP (SSH File Transfer Protocol), enabling secure file transfers to and from Blob Storage.
64+
65+
66+
https://github.com/user-attachments/assets/375690b5-108f-4f85-ad9c-915ef7c40684
67+
68+
| Feature | Description |
69+
|---------|-------------|
70+
| **Hierarchical Namespace** | - Organizes objects into a hierarchy of directories and subdirectories, similar to a traditional file system. <br/> - Scales linearly without degrading performance. |
71+
| **Authentication** | - Uses local user identities for authentication. <br/> - Users can authenticate using passwords or SSH (Secure Shell) private key credentials. <br/> - Local users can be authorized to access specific containers and directories within Blob Storage. |
72+
| **Configuration** | - SFTP support can be enabled with a single click in the Azure portal. <br/> - Requires a standard general-purpose v2 or premium block blob storage account with hierarchical namespace enabled. <br/> - Provides REST APIs and Azure CLI (Command-Line Interface) commands for managing local users and permissions. |
73+
| **Security** | - SFTP uses port 22 for secure file transfers. <br/> - If SFTP access is not configured, all requests will receive a disconnect from the service. <br/> - Provides logging and monitoring capabilities to track SFTP access and usage. |
74+
75+
## Compute Services with File Server
76+
77+
> **Azure Compute Services** provide virtual machines (VMs) and other compute resources to host applications and services.
78+
79+
<p align="center">
80+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/ed0e7837-5428-430b-a91d-b33a58a71114">
81+
</p>
82+
83+
From [Choose an Azure compute service](https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree)
84+
85+
| Feature | Description |
86+
|---------|-------------|
87+
| **VM Types** | - Several VM sizes and types are available. <br/> - Includes general-purpose, compute-optimized, and memory-optimized VMs. |
88+
| **Operating Systems** | - Supports Windows and Linux operating systems. |
89+
| **File Sharing Protocols** | - Supports SMB (Server Message Block) and NFS (Network File System) for file sharing. |
90+
| **Storage Options** | - Can use Azure Disks for persistent storage attached to VMs. |
91+
| **Scalability and Availability** | - Azure Virtual Machine Scale Sets allow you to create and manage a group of identical VMs for high availability and scalability. <br/> - Availability Sets ensure that VMs are distributed across multiple physical servers to avoid single points of failure. |
92+
93+
94+
<div align="center">
95+
<h3 style="color: #4CAF50;">Total Visitors</h3>
96+
<img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
97+
</div>

0 commit comments

Comments
 (0)