You won't be able to retrieve that password from Azure again. Make sure to copy that password and save it in a location where you can find it later. If you choose password authentication, then your password will be provided after you finish configuring a local user. You can't set custom passwords, rather Azure generates one for you. However, multifactor authentication, whereby both a valid password and a valid public-private key pair are required for successful authentication isn't supported. You can configure both forms of authentication and let connecting local users choose which one to use.
You can authenticate local users connecting via SFTP by using a password or a Secure Shell (SSH) public-private keypair. To learn more, see Access control model in Azure Data Lake Storage Gen2. However, if Jeff also has a local user identity with delete permission for data in container con1, they can delete foo.txt via SFTP using the local user identity.įor SFTP enabled storage accounts, you can use the full breadth of Azure Blob Storage security settings, to authenticate and authorize users accessing Blob Storage via Azure portal, Azure CLI, Azure PowerShell commands, AzCopy, as well as Azure SDKs, and Azure REST APIs. If Jeff is accessing the storage account via NFS (when not mounted as root/superuser), Blob REST, or Data Lake Storage Gen2 REST, these permissions will be enforced. Local users do not interoperate with other Azure Storage permission models such as RBAC (role based access control), ABAC (attribute based access control), and ACLs (access control lists).įor example, Jeff has read only permission (can be controlled via RBAC, ABAC, or ACLs) via their Azure AD identity for file foo.txt stored in container con1. To learn how to enable SFTP for your storage account, see Connect to Azure Blob Storage by using the SSH File Transfer Protocol (SFTP). This article describes SFTP support for Azure Blob Storage. Then you can set up local user identities for authentication to connect to your storage account with SFTP via port 22. Now, with SFTP support for Azure Blob Storage, you can enable an SFTP endpoint for Blob Storage accounts with a single click. For custom solutions, you would have to create virtual machines (VMs) in Azure to host an SFTP server, and then update, patch, manage, scale, and maintain a complex architecture. Prior to the release of this feature, if you wanted to use SFTP to transfer data to Azure Blob Storage you would have to either purchase a third party product or orchestrate your own solution. You could update custom applications to use the REST API and Azure SDKs, but only by making significant code changes. However, legacy workloads often use traditional file transfer protocols such as SFTP. Azure allows secure data transfer to Blob Storage accounts using Azure Blob service REST API, Azure SDKs, and tools such as AzCopy.
0 kommentar(er)
