New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Terraform: let the KeyVault manage the storage account #47

Open

paullatzelsperger opened this issue Apr 27, 2021 · 1 comment

Assignees

Collaborator

paullatzelsperger commented Apr 27, 2021 •

edited

Loading

The StorageAccount in Azure should be configured such that it is managed by the KeyVault and thus the Keyvault handles:

Key regeneration
obtaining Keys
obtaining SAS tokens

Ideally Terraform has providers for it, otherwise we must execute a shell script.

Benefit: we do not need to store StorageAccount credentials in code anymore, we can simply ask the KeyVault to generate an SAS token on demand.

Use this link as starting point.
Or this discussion: https://docs.microsoft.com/en-us/answers/questions/144549/generating-sastokens-for-files-inside-my-blob-stor.html

paullatzelsperger self-assigned this

Collaborator Author

paullatzelsperger commented Apr 30, 2021

as of today this seems to be not yet implemented with terraform, but there's a GitHub issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment