Azure Storage Account

Overview

Use this account type to connect Binary Snaps with data sources that use the Azure Storage account.

Account settings



Legend:
  • Expression icon (): Allows using JavaScript syntax to access SnapLogic Expressions to set field values dynamically (if enabled). If disabled, you can provide a static value. Learn more.
  • SnapGPT (): Generates SnapLogic Expressions based on natural language using SnapGPT. Learn more.
  • Suggestion icon (): Populates a list of values dynamically based on your Snap configuration. You can select only one attribute at a time using the icon. Type into the field if it supports a comma-separated list of values.
  • Upload : Uploads files. Learn more.
Learn more about the icons in the Snap settings dialog.
Field/Field set Type Description
Label

String

 String

Required.Specify a unique label for the account.

Default value: None.

Example: Azure Storage Account
Account name String Required. Specify the account name created in Azure storage.

Default value: N/A

Example: azureaccountname
Auth Type Dropdown list Select the authorization type you want when setting up the account. Available options are:

  • Access Key: An Access Key is a credential used to authenticate and authorize access to cloud services and resources. Access keys can also authenticate access to storage services such as blobs, queues, tables, and files.

  • SAS URI: A SAS (Shared Access Signature) URI is a secure way to provide limited access to resources in Azure Storage without exposing the storage account keys. A SAS URI contains a token that grants specific permissions to a resource for a defined time period. This mechanism is useful for scenarios where you need to share access to storage resources with clients or applications without sharing the storage account key.

  • Managed identity: Managed identity is used to authenticate and access a wide range of Azure services, such as Azure Key Vault, Azure SQL Database, Azure Storage, and more. This integration ensures that the applications can securely access resources without requiring specific credentials.

  • Service principal: A service principal is an identity created for an application or automated tool to access Azure resources. Select this option to authenticate with the Tenant ID, Client ID, and Client secret of the registered Azure Active Directory application. Before you use this option, register the application and assign the storage data roles as described in Configuration in the Azure portal.

    Note: Binary Snaps configured with an Azure Storage Account that uses Service principal authentication support the WASB and WASBS protocols.


Default value: Access Key

Example: SAS URI
Managed identity Dropdown list/Expression Appears when you select Managed identity for Auth type.
Choose the identity you want to use for authentication. The available options are:

  • User assigned managed identity: Created as a standalone Azure resource. It can be assigned to one or more Azure resources. Its lifecycle is independent of the Azure resources it is assigned to.

  • System assigned managed identity: Created and managed by Azure for an Azure resource, such as a virtual machine or a web app. The lifecycle of this identity is tied to the Azure resource, so it is automatically deleted when the resource is deleted.

Default value: System assigned managed identity

Example: User assigned managed identity
Tenant ID String/Expression Appears when you select Service principal for the Auth Type.

Specify the ID of the Azure Active Directory tenant in which the service principal is registered.

Default value: N/A

Example: 72f988bf-86f1-41af-91ab-2d7cd011db47
Client ID String/Expression Appears when you select User assigned managed identity for the Managed identity, or Service principal for the Auth Type.

Specify the client ID of the User assigned managed identity or of the service principal.

Default value: N/A

Example: 12345678-9abc-def0-1234-56789abcdef0
Client secret String/Expression Appears when you select Service principal for the Auth Type.

Specify the client secret of the service principal that you want to use for authentication.

Default value: N/A

Example: <Encrypted>
Primary access key String/Expression Appears when you select Access Key in the Auth Type.

Enter the primary access key associated with the Azure storage account.

Default value: N/A

Example: <Encrypted>
SAS URI String Appears when you select SAS URI in the Auth Type.

Specify the URI containing the SAS token to perform read/write operations in the Azure Storage account. You can generate an SAS URI either in the Azure portal or from the SAS Generator Snap.

Warning: If you provide the SAS URI in the Snap, then the Snap considers the URI given in the Snap and ignores the URI in the account settings.

Default value: N/A

Example: azureaccountname.blob.core.windows.net
Blob endpoint String/Expression The Azure storage blob endpoint. Use this URL to access the Blob service for a specific storage account.

Leave this field empty to use the default endpoint: "https://<storage-account-name>.blob.core.windows.net"

Default value: N/A

Example: https://mystorageaccount.blob.core.windows.net/mycontainer/myfile.txt
Request Size (MB) Integer Specify the buffer size (in MB) to be used by the corresponding Binary Snap before performing the required action in the Azure storage.
Warning:
  • For writing large files, specifying a value in this field ensures that the specified buffer limit is filled before calling the Azure API to write data to Azure storage. If the file size is smaller than the specified buffer limit, Snap calls the Azure API as soon as the file is stored in the buffer.
  • We recommend that you set the Request Size to the maximum limit so that the execution time is fast. However, this can consume memory. If the value of the Request size is small and the file size is large then the Snap might need to make multiple API calls to write to Azure storage, which might affect the performance.

Default value: 4 MB

Example: 50 MB

Maximum Size: 100 MB

Limitations

  • The SAS Generator Snap does not support Azure Storage Accounts configured with Service principal or Managed identity authentication.

Account encryption

Standard Encryption If you are using Standard Encryption, the High sensitivity settings under Enhanced Encryption are followed.
Enhanced Encryption If you have the Enhanced Account Encryption feature, the following describes which fields are encrypted for each sensitivity level selected per each account.
  • High: Primary access key
  • Medium + High: Primary access key
  • Low + Medium + High: Primary access key