You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
1.In the**Data management**section, go to **Containers**.
40
40
1. Select your container (for example, `content`).
41
-
1.Click**Change access level**.
41
+
1.Select**Change access level**.
42
42
1. Set **Anonymous access level** to **Private (no anonymous access)**.
43
-
1.Click**OK**.
43
+
1.Select**OK**.
44
44
45
45
### Create a new subnet for private endpoint NICs
46
46
47
47
1. Navigate to your virtual network where NGINXaaS is deployed.
48
48
1. Go to **Subnets** under **Settings**.
49
-
1.Click**+ Subnet**.
49
+
1.Select**+ Subnet**.
50
50
1. Create a new subnet which will be used to assign IP address to your Private Endpoint NIC.
51
-
1. Make a note of the subnet name for the next step.
51
+
1. Make a note of the subnet name; you will need it in the next step.
52
52
53
53
### Create a private endpoint
54
54
55
-
1. In your storage account, navigate to**Networking** under **Security + networking**.
55
+
1. In your storage account, in the**Security + networking** section, go to **Networking**.
56
56
1. Go to the **Private endpoint connections** tab.
57
-
1.Click**+ Private endpoint**.
57
+
1.Select**+ Private endpoint**.
58
58
1. Configure the private endpoint:
59
59
-**Name**: Provide a descriptive name for the private endpoint
60
60
-**Network Interface Name**: Provide a name for the network interface
@@ -65,14 +65,14 @@ Upload your static files to a container in your storage account. In this example
65
65
66
66
### Generate a Shared Access Signature (SAS) token
67
67
68
-
1. In your storage account, navigate to**Shared access signature**under **Security + networking**.
68
+
1. In your storage account, in the**Security + networking**section, go to **Shared access signature**.
69
69
1. Configure the SAS token with minimal required permissions:
70
70
-**Allowed services**: Check **Blob**
71
71
-**Allowed resource types**: Check **Object**
72
72
-**Allowed permissions**: Check **Read** only
73
73
-**Start and expiry date/time**: Set appropriate validity period
74
74
-**Allowed protocols**: Select **HTTPS only**
75
-
1.Click**Generate SAS and connection string**.
75
+
1.Select**Generate SAS and connection string**.
76
76
1. Copy the **SAS token** (the part starting with `?sv=`).
77
77
78
78
{{< call-out "important" >}}Store the SAS token securely and regenerate it regularly according to your security policies. Grant only the minimum permissions required for your use case.{{< /call-out >}}
@@ -136,7 +136,7 @@ Upload your NGINX configuration to your NGINXaaS deployment following the instru
136
136
## Test the configuration
137
137
138
138
1. Go to `https://<NGINXaaS IP>/static/<your-file-name>` to access your static content.
139
-
1. For example, if you have an `index.html` file in your `content` container, access it via `https://<NGINXaaS IP>/static/index.html`.
139
+
- For example, if you have an `index.html` file in your `content` container, access it via `https://<NGINXaaS IP>/static/index.html`.
140
140
1. Your content should be served from Azure Blob Storage through the private endpoint.
0 commit comments