Azure Storage

# Tạo resource group
# Chọn subscription nếu cần
# az account set --subscription "YOUR_SUBSCRIPTION_ID"

# Biến dùng chung
RG_NAME="rg-az900-lab05"
LOCATION="southeastasia"
STORAGE_NAME="sthoatranlab$RANDOM$RANDOM"
STORAGE_NAME=$(echo "$STORAGE_NAME" | tr '[:upper:]' '[:lower:]' | cut -c1-24)

echo "Storage Account Name: $STORAGE_NAME"

# Tạo resource group
az group create \
  --name "$RG_NAME" \
  --location "$LOCATION"

# Tạo storage account -Tên của storages là duy nhất trên Az không được giống.
# Lưu ý: bật --allow-blob-public-access true nếu muốn container public
az storage account create \
  --name "$STORAGE_NAME" \
  --resource-group "$RG_NAME" \
  --location "$LOCATION" \
  --sku Standard_GRS \
  --kind StorageV2 \
  --access-tier Hot \
  --https-only true \
  --min-tls-version TLS1_2 \
  --allow-blob-public-access true \
  --tags Environment=Learning Course=AZ-900

# Lấy connection string
# Lấy connection string
CONN=$(az storage account show-connection-string \
  --name "$STORAGE_NAME" \
  --resource-group "$RG_NAME" \
  --query connectionString \
  -o tsv)

# Tạo container public mức blob
az storage container create \
  --name assets \
  --public-access blob \
  --connection-string "$CONN"

# Tạo file test
echo "Hello from HoaTranLab AZ-900" > test.txt

# Upload file
az storage blob upload \
  --container-name assets \
  --name test.txt \
  --file test.txt \
  --connection-string "$CONN" \
  --overwrite true

# Xem URL blob
BLOB_URL=$(az storage blob url \
  --container-name assets \
  --name test.txt \
  --connection-string "$CONN" \
  -o tsv)

echo "$BLOB_URL"

# Tạo SAS token read-only cho blob, hết hạn sau 24h
# Tạo thời hạn hết hạn sau 24 giờ
END_DATE=$(date -u -d "24 hours" '+%Y-%m-%dT%H:%MZ' 2>/dev/null || date -u -v+24H '+%Y-%m-%dT%H:%MZ')

# Tạo SAS token read-only
SAS_TOKEN=$(az storage blob generate-sas \
  --container-name assets \
  --name test.txt \
  --permissions r \
  --expiry "$END_DATE" \
  --https-only \
  --connection-string "$CONN" \
  -o tsv)

echo "SAS Token:"
echo "$SAS_TOKEN"

echo "Full SAS URL:"
echo "${BLOB_URL}?${SAS_TOKEN}"

cat > lifecycle-policy.json << 'EOF'
{
  "rules": [
    {
      "name": "tiering-rule",
      "enabled": true,
      "type": "Lifecycle",
      "definition": {
        "filters": {
          "blobTypes": ["blockBlob"]
        },
        "actions": {
          "baseBlob": {
            "tierToCool": {
              "daysAfterModificationGreaterThan": 30
            },
            "tierToArchive": {
              "daysAfterModificationGreaterThan": 90
            },
            "delete": {
              "daysAfterModificationGreaterThan": 365
            }
          }
        }
      }
    }
  ]
}
EOF

# Áp dụng policy
az storage account management-policy create \
  --account-name "$STORAGE_NAME" \
  --resource-group "$RG_NAME" \
  --policy @lifecycle-policy.json

# Tạo file share 10GB
az storage share create \
  --name fileshare-lab05 \
  --quota 10 \
  --connection-string "$CONN"

az storage share list \
  --connection-string "$CONN" \
  --output table

az group delete --name rg-az900-lab05 --yes --no-wait