Defining a connection to Azure Storage

To access data from Azure Blob and File Storage, you must define a connection that specifies the storage account name and access key.

About this task

Get storage account name and access key for your Azure Storage account.

Option Procedure Best practices for security
Specify the values in the stage
  • In the stage editor, specify values for the Storage Account Name and Access key properties
  • From the Use credentials file list, select No
 Use encrypted job parameters for the values that you specify in the stage editor
Specify the values in a credentials file
  • Create a file named AzureConnection.txt
  • In the AzureConnection.txt file, specify the protocol, storage account name, access key properties in the form of connection string that can be copied from the Azure storage account.
  • From the Use credentials file list, select Yes
  • In the Credentials file field, specify the fully qualified path for the AzureConnection.txt file.
 Set the security permissions on the AzureConnection.txt so that only the user who runs the job has read access to it
Specify the SAS value in a credentials file
  1. Create a file named AzureSASConnection.txt
  2. In the AzureSASConnection.txt file, specify the protocol, storage account name, Endpoint, SAS token in the form of a Connection string that can be copied from the Azure storage account.
  3. From the Use credentials file list, select Yes
  4. In the credentials file field, specify the fully qualified path for the AzureSASConnection.txt file.
 Set the security permissions on the AzureSASConnection.txt so that only the user who runs the job has read access to it.

Connection String example:

DefaultEndpointsProtocol=https;AccountName=sampleaccount;AccountKey=samplekey;EndpointSuffix=core.windows.net

Connection String with SAS token example :

BlobEndpoint=https://sampleaccount.blob.core.windows.net/;FileEndpoint=https://sampleaccount.file.core.windows.net/;SharedAccessSignature=SAStoken

Additionally, Azure Storage connection can also be established through a proxy server.