Managed Identity w/Azure Functions and Storage accounts

3
votes

What is the appropriate way to use managed identity with Azure Functions and Storage accounts if the the AzureWebJobsStorage app setting is required by the function host? Is there a managed identity version of the storage account connection string that doesn't include the access key?

1
azureazure-functionsazure-storageazure-managed-identity
as far as I know, there's no other way to define it rather then by using the connection string in the settings.json. I've sent and email to a MSFT employee and hopefully there will be another way for it. – Thiago Custodio
@ThiagoCustodio Thanks for checking! – Joey Eng

1 Answers

2
votes

While you can't use Managed Identity to authenticate to the storage account directly, you can store the access key in Key Vault and fetch it from there using Key Vault References using Managed Identity.

Just wanted to share this because I believe its great to use KeyVault References instead of directly using access keys in the app settings.