Atelier d'architecture - S03 - EP02 (Sécuriser Azure Files)

Access your Azure Files network shares with a private IP address via a site-to-site VPN—without exposing a public IP. In this video, I analyze and deploy a complete hybrid architecture: Virtual Network Gateway (VNG), Local Network Gateway (LNG), Private Endpoint, private DNS zone, Azure Backup, and SMB mapping from an on-premises workstation (example using a Synology RT2600ac router/VPN). If you want more Azure hybrid content (DNS, ExpressRoute, Files, Entra ID), like 👍, comment 💬, and subscribe 🔔! 📖 Table of Contents 00:00 • Intro 00:58 • Target Architecture 03:35 • VPN Deployment 05:35 • Azure Files 06:35 • Private Endpoint 08:35 • Flow Management 09:50 • Backup Configuration 11:42 • Best Practices 11:56 • Conclusion ▬▬▬▬▬▬ ⬇️ Want to learn more? ⬇️ ▬▬▬▬▬▬ • Video on creating an S2S VPN:    • Créer un VPN site-à-site vers Azure   • Reference architecture: https://learn.microsoft.com/en-us/azu... • Azure Files: https://learn.microsoft.com/fr-fr/azu... • Create and manage a VPN gateway using the Azure portal: https://learn.microsoft.com/fr-fr/azu... • Private Endpoint: https://learn.microsoft.com/fr-fr/azu... Example mapping with Access Key: New-PSDrive -Name 'Z' -PSProvider FileSystem -Root "\\storageppdemofile.file.core.windows.net\marketing" -Credential (New-Object System.Management.Automation.PSCredential) Example of adding a static route (adapt to ranges) route add 10.76.16.0 mask 255.255.240.0 10.80.16.81 -p ▬▬▬▬▬▬ CONTACT ME 🚀 ▬▬▬▬▬▬ ► LinkedIn   / ppaiola   ► Twitter   / philit_pp   ► Twitch   / philouit   ▬▬▬▬▬▬ SUBSCRIBE TO MY CHANNEL 🛴 ▬▬▬▬▬▬ ► Link https://www.youtube.com/@phil_it?sub_... This video requires knowledge of the Azure environment.