FIne-Grained Access To Azure Data Lake Storage Gen2
2022TL; DR
With an enterprise data lake you have multiple authorisation mechanisms. For a tightly controlled level of access, you can use Access Control Lists (ACLs). We will cover ACL permissions and how to store and deploy ACLs from source.
Session Details
With an enterprise data lake you have multiple authorisation mechanisms to allow users to access the blobs. And whilst Azure RBAC offers a straightforward level of access control, this level of access applies across the entire container and blobs. For a finer-grained level of access, you can use Access Control Lists (ACLs). ACLs require tightly-controlled management and a good understanding of what permissions are required at what level of the directory so that users can access the data they need to. We will have a brief overview of ACL's and focus in greater detail on how to store ACLs in source control and apply the via a deployent pipeline.
3 things you'll get out of this session
Speakers
Richie Lee's previous sessions
What Playing Minecraft Taught Me About DevOps
Both Minecraft and Devops are phenomena from the early 2010s that have stood the test of time. But what can we learn from the sandbox-based video game Minecraft that can be applied to a set of practices for software development? By the end of this session I hope you have an appreciation of both DevOps and Mincraft!
How To Use Azure Managed Identities
Let's be honest; dealing with Keys for Azure Service Principal can be a pain. Fortunately Azure Active Identity has an Identity type called Managed Identity that we can assign to a resource and make use of that for authorisation. We will discuss the beneifts of using Managed Identities in Azure to authorise resources without having to use Service Principals.