In this first step of the demonstration, we are going to create a storage account with a blob container in it. We are creating this using Azure CLI. Therefore, take the following steps:

1. Navigate to the Azure portal by opening https://portal.azure.com/.
2. Open Azure Cloud Shell and make sure that Bash is selected. 
3. Add the following line of code to create a resource group:
   

az group create --name "DataEncryptionResourceGroup" -l "EastUS"

4. Create a Blob storage account with a blob container (make sure that the name is unique and in lowercase):

az storage account create 
    --name packtblobstorageaccount1 
    --resource-group DataEncryptionResourceGroup 
    --location eastus 
    --sku Standard_LRS 
    --encryption blob

5. Display the storage account keys:

az storage account keys list 
 --account-name packtblobstorageaccount1 
 --resource-group DataEncryptionResourceGroup 
 --output table

6. Make note of the storage account name and the value. We are going to use this in the app settings of the application in the next section.

In the next section, we are going to create the Key Vault.