4 comments

Add a comment…

Sign in

prestine

Your email address

Check!

invalid email

(thinking…)

Reset

or sign in with

• 
• 

UserVoice password

Forgot password?

Create a password

Your name

I agree to the terms of service

Signed in as (Sign out)

Close

Close

Post comment Submitting...

• Thomas (Mentum) commented  ·  April 9, 2013 6:19 a.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  Erik. it's not that I don't agree. It's important to make security around destructive operations much safer. And it's joke that MS does not address this issue.

  But do you know of "Linked resources" in the new portal? Eg. we have a Web site which uses Azure Storage. We have added the storage as a linked resource to the web site, so now we can't delete the storage unless we remove this "link" *(or delete the web site).

  Also it serves as a kind of documentation on how storage and services are depended on each other.

  But it does not guard you agains hackers.

• Eric Small commented  ·  April 9, 2013 5:45 a.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  There should be optional or opt-in two factor authentication on destructive operations. Deleting an entire storage account with all the contents is only a couple clicks away if you have a Windows Live login with administrative access to the Azure account.

  Another option would be handle container leases in a different manner. I think they should make that container and the storage account un-deleteable until the lease has been released. At least then I could get an infinite lease on all my containers and make the storage account somewhat safer from accidental deletion. I'm not certain if this solution would not help with malicious deletion since there is a break operation for leases.

• Spiir udviklingsteam commented  ·  July 8, 2011 1:51 a.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  I don't like that my Windows Live Id is a single point of access to Azure.

  I'ts a simple Username and password. And I want a policy that ensures that I'm forced to enter username and password every time I login to the Portal. Right now it's cached in my browser.

  Also I would love to be able to enforce a password change every second week.

  And I would love that I could set a IP restriction on the portal.

  AND IP RESTRICTION ON THE AZURE STORAGE. I'ts a no brainer.

  And I would love a readonly access key to Azure Storage.

• AdminMike Wickstrand (Admin, Microsoft Windows Azure) commented  ·  November 26, 2009 12:17 p.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  Thanks for spelling out your concerns here about the cloud, I appreciate it.

  Mike