Azure / Azure/HubAndSpokeResearchEnclave

Update Data Factory authentication to use managed identity to access Azure Files (airlock)

Open
#208 1 comment 0 reactions 1 assignee Claimed by @SvenAelterman View on GitHub
in-progress spoke
Dominant language
Bicep
Stars
18
Forks
18
Avg merge
4d 19h
Merged PRs (30d)
3

Description

The Data Factory connector for Azure Files now supports using managed identities, including user-assigned managed identities (UAMI). The current implementation uses legacy shared key access with a connection string stored in Key Vault.

Doc ref: https://learn.microsoft.com/azure/data-factory/connector-azure-file-storage?tabs=data-factory#user-assigned-managed-identity-authentication

- [x] Remove Azure Files connection strings from Key Vault.
- [ ] Update Azure File Shares authentication to allow the user-assigned managed identity for ADF to read and write files.
- The UAMI needs the `Storage File Data Privileged Contributor` role
- [ ] Update the Linked Service definition for the generic File Share to use user-assigned managed identity.
- [x] Remove the Key Vault Linked Service from ADF because it was only used to access the connection string secret.
- [x] Turn off access key authentication on all storage accounts.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.