Skip to content

Latest commit

 

History

History
164 lines (118 loc) · 7.49 KB

storage-powershell-independent-clouds.md

File metadata and controls

164 lines (118 loc) · 7.49 KB
title description services author ms.service ms.topic ms.date ms.author ms.component
Managing Storage in the Azure independent clouds Using Azure PowerShell | Microsoft Docs
Managing Storage in the China Cloud, Government Cloud, and German Cloud Using Azure PowerShell
storage
roygara
storage
article
10/24/2017
rogarana
common

Managing Storage in the Azure independent clouds using PowerShell

Most people use Azure Public Cloud for their global Azure deployment. There are also some independent deployments of Microsoft Azure for reasons of sovereignty and so on. These independent deployments are referred to as "environments." The following list details the independent clouds currently available.

Using an independent cloud

To use Azure Storage in one of the independent clouds, you connect to that cloud instead of Azure Public. To use one of the independent clouds rather than Azure Public:

  • You specify the environment to which to connect.
  • You determine and use the available regions.
  • You use the correct endpoint suffix, which is different from Azure Public.

The examples require Azure PowerShell module version 4.4.0 or later. In a PowerShell window, run Get-Module -ListAvailable AzureRM to find the version. If nothing is listed, or you need to upgrade, see Install Azure PowerShell module.

Log in to Azure

Run the Get-AzureRmEnvironment cmdlet to see the available Azure environments:

Get-AzureRmEnvironment

Sign in to your account that has access to the cloud to which you want to connect and set the environment. This example shows how to sign into an account that uses the Azure Government Cloud.

Connect-AzureRmAccount –Environment AzureUSGovernment

To access the China Cloud, use the environment AzureChinaCloud. To access the German Cloud, use AzureGermanCloud.

At this point, if you need the list of locations to create a storage account or another resource, you can query the locations available for the selected cloud using Get-AzureRmLocation.

Get-AzureRmLocation | select Location, DisplayName

The following table shows the locations returned for the German cloud.

Location DisplayName
germanycentral Germany Central
germanynortheast Germany Northeast

Endpoint suffix

The endpoint suffix for each of these environments is different from the Azure Public endpoint. For example, the blob endpoint suffix for Azure Public is blob.core.windows.net. For the Government Cloud, the blob endpoint suffix is blob.core.usgovcloudapi.net.

Get endpoint using Get-AzureRMEnvironment

Retrieve the endpoint suffix using Get-AzureRMEnvironment. The endpoint is the StorageEndpointSuffix property of the environment. The following code snippets show how to do this. All of these commands return something like "core.cloudapp.net" or "core.cloudapi.de", etc. Append this to the storage service to access that service. For example, "queue.core.cloudapi.de" will access the queue service in German Cloud.

This code snippet retrieves all of the environments and the endpoint suffix for each one.

Get-AzureRmEnvironment | select Name, StorageEndpointSuffix

This command returns the following results.

Name StorageEndpointSuffix
AzureChinaCloud core.chinacloudapi.cn
AzureCloud core.windows.net
AzureGermanCloud core.cloudapi.de
AzureUSGovernment core.usgovcloudapi.net

To retrieve all of the properties for the specified environment, call Get-AzureRmEnvironment and specify the cloud name. This code snippet returns a list of properties; look for StorageEndpointSuffix in the list. The following example is for the German Cloud.

Get-AzureRmEnvironment -Name AzureGermanCloud

The results are similar to the following:

Property Name Value
Name AzureGermanCloud
EnableAdfsAuthentication False
ActiveDirectoryServiceEndpointResourceI http://management.core.cloudapi.de/
GalleryURL https://gallery.cloudapi.de/
ManagementPortalUrl https://portal.microsoftazure.de/
ServiceManagementUrl https://manage.core.cloudapi.de/
PublishSettingsFileUrl https://manage.microsoftazure.de/publishsettings/index
ResourceManagerUrl http://management.microsoftazure.de/
SqlDatabaseDnsSuffix .database.cloudapi.de
StorageEndpointSuffix core.cloudapi.de
... ...

To retrieve just the storage endpoint suffix property, retrieve the specific cloud and ask for just that one property.

$environment = Get-AzureRmEnvironment -Name AzureGermanCloud
Write-Host "Storage EndPoint Suffix = " $environment.StorageEndpointSuffix

This returns the following information.

Storage Endpoint Suffix = core.cloudapi.de

Get endpoint from a storage account

You can also examine the properties of a storage account to retrieve the endpoints. This can be helpful if you are already using a storage account in your PowerShell script; you can just retrieve the endpoint you need.

# Get a reference to the storage account.
$resourceGroup = "myexistingresourcegroup"
$storageAccountName = "myexistingstorageaccount"
$storageAccount = Get-AzureRmStorageAccount `
  -ResourceGroupName $resourceGroup `
  -Name $storageAccountName 
  # Output the endpoints.
Write-Host "blob endpoint = " $storageAccount.PrimaryEndPoints.Blob 
Write-Host "file endpoint = " $storageAccount.PrimaryEndPoints.File
Write-Host "queue endpoint = " $storageAccount.PrimaryEndPoints.Queue
Write-Host "table endpoint = " $storageAccount.PrimaryEndPoints.Table

For a storage account in the Government Cloud, this returns the following:

blob endpoint = http://myexistingstorageaccount.blob.core.usgovcloudapi.net/
file endpoint = http://myexistingstorageaccount.file.core.usgovcloudapi.net/
queue endpoint = http://myexistingstorageaccount.queue.core.usgovcloudapi.net/
table endpoint = http://myexistingstorageaccount.table.core.usgovcloudapi.net/

After setting the environment

From here going forward, you can use the same PowerShell used to manage your storage accounts and access the data plane as described in the article Using Azure PowerShell with Azure Storage.

Clean up resources

If you created a new resource group and a storage account for this exercise, you can remove all of the assets by removing the resource group. This also deletes all resources contained within the group. In this case, it removes the storage account created and the resource group itself.

Remove-AzureRmResourceGroup -Name $resourceGroup

Next steps