Challenge: lock down the finance reports account

تحدي: اقفل Account تقارير الماليات

Requirements only — decide the blades and commands yourself. Use the hint if stuck; reveal the solution only after a real attempt. contosofinrep still allows TLS 1.0 and keys everywhere. Move it to identity-based access with least privilege, while an external auditor still gets a temporary read link to q3.pdf .

The 4 tasks you will do

• Requirement 1 — Transport baselineالمطلب 1 — Baseline النقل
• Requirement 2 — Least-privilege data accessالمطلب 2 — وصول للداتا بأقل صلاحية
• Requirement 3 — Auditor link that survives key changesالمطلب 3 — لينك للـ Auditor ميتأثرش بتغيير المفاتيح
• Requirement 4 — No more keysالمطلب 4 — مفيش مفاتيح تاني

The lesson it belongs to

• Configure Azure Storage security