Managing Stored Access Policies for Azure Service Principals
2022TL; DR
When using SAS Keys to access Azure Storage Containers, there is a problem with managing the expiry date; in that it is an immutable property.However, this is an alternative, by assigning a Stored Access Policy to a SAS Key we can manage the expiry date in our pipelines. We will disucss how to do this, and the challenges and other benefits when using Stored Access Policies.
Session Details
When using SAS Keys to access Azure Storage Containers, there is a problem with managing the expiry date; in that it is an immutable property. This means that SAS Keys need to be re-created and the value refreshed, which can be time consuming and problematic. However, this is an alternative, by assigning a Stored Access Policy to a SAS Key we can manage the expiry date in our pipelines. We will disucss how to do this, and the challenges and other benefits when using Stored Access Policies.
3 things you'll get out of this session
Speakers
Richie Lee's previous sessions
What Playing Minecraft Taught Me About DevOps
Both Minecraft and Devops are phenomena from the early 2010s that have stood the test of time. But what can we learn from the sandbox-based video game Minecraft that can be applied to a set of practices for software development? By the end of this session I hope you have an appreciation of both DevOps and Mincraft!
How To Use Azure Managed Identities
Let's be honest; dealing with Keys for Azure Service Principal can be a pain. Fortunately Azure Active Identity has an Identity type called Managed Identity that we can assign to a resource and make use of that for authorisation. We will discuss the beneifts of using Managed Identities in Azure to authorise resources without having to use Service Principals.