Prerequisites
Make sure you meet the following prerequisites for setting up your environment:
An Azure account with an active subscription. If you don't already have an Azure account, create an account for free.
Ensure you have the following resources already deployed:
Azure Virtual Machine (VM): The VM from which backup and restore are executed.
Virtual Network (VNet) & Subnet: The network attached to both the storage account and the VM.
Azure Storage Account(s): The General-Purpose V2 storage account(s) hosting your Azure File shares(SMB).
How to configure your environment for a public network with restricted access
Follow these instructions to set up your environment for protecting Azure Files over a public network with restricted access.
Log in to the Azure portal.
In the Search resources, services, and docs box, search for your Virtual network
Click on the virtual network that is assigned to the Azure VM.
Click Settings > Service endpoint.
Perform the following steps to add the Microsoft.Storage service endpoint to the Azure VM subnet, if it isn’t already configured:
Click Add.
Select Microsoft.Storage for Service.
Select Subnet, which is assigned to Azure VM.
Click Add.
Status should show as Succeeded.
Go to the storage account you want to access.
In the left-hand navigation pane, click Security + networking > Networking.
Configure Network Access by performing the following steps:
Under the Firewalls and virtual networks tab:Select Public network access > Enable.
Select Public network access scope > Enabled from selected virtual networks.
This restricts access to the storage account to only the networks you specify.
Add the Virtual Network by performing the following steps:
Click + Add existing virtual network.
In the new pane, select the Subscription and Virtual network where your VM is located.
Select the specific Subnet that contains your VM.
A message will appear to confirm that a service endpoint will be created on the subnet.
Click "Add" to apply the configuration.
How to configure your environment for a private network with restricted access
Log in to the Azure portal.
Navigate to your storage account.
From the left pane, click Networking and go to the Private Endpoints tab.
Click the private endpoint and copy the Virtual network/subnet value.
Create an Azure virtual machine and use the VNet/Subnet copied above during creation.