Azure Blob Storage
This page contains the setup guide and reference information for the Azure Blob Storage source connector.
info
Cloud storage may incur egress costs. Egress refers to data that is transferred out of the cloud storage system, such as when you download files or access them from a different location. For more information, see the Azure Blob Storage pricing guide.
Prerequisites
- Tenant ID of the Microsoft Azure Application user
- Azure Blob Storage account name
- Azure blob storage container (Bucket) Name
Minimum permissions (role Storage Blob Data Reader ):
[
{
"actions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/read",
"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action"
],
"notActions": [],
"dataActions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
],
"notDataActions": []
}
]
Setup guide
Step 1: Set up Azure Blob Storage
- Create a storage account with the permissions details
warning
To use Oauth 2.0 Authentication method, Access Control (IAM) should be setup. It is recommended to use role Storage Blob Data Reader
Follow these steps to set up an IAM role:
- Go to Azure portal, select the Storage (or Container) you'd like to sync from and get to Access Control(IAM) -> Role Assignment
- Click on
Add
and selectAdd role assignment
from the dropdown list - Search by role name
Storage Blob Data Reader
in search box, Select role from the list and clickNext
- Select
User, Group, or service principal
, click onmembers
and select member(s) so they appear in table and clickNext
- (Optional) Add Conditions to restrict the role assignments a user can create.
- Click
Review + Assign