Closed BeneHa closed 3 years ago
Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @shawnxzq, @lmy269.
Author: | BeneHa |
---|---|
Assignees: | - |
Labels: | `Data Factory`, `Service Attention`, `customer-reported`, `needs-triage`, `question` |
Milestone: | - |
@BeneHa In your linked service, the way to define "password" property in your linked service is not correct, it must be a credential and please don't use parameter for credentials. Suggest you either put raw credential as the value and the backend will encrypt it or you can put your credential into AKV and you can define it as a AKV credential, please refer to the document below for details, thanks! https://docs.microsoft.com/en-us/azure/data-factory/store-credentials-in-key-vault
@BeneHa I am going to close the issue for now and feel free to let me know if you still have any question on this, thanks!
@shawnxzq, I do not agree. In the example - a password is provided not directly but via parameter (dynamic content), which IS ABSOLUTELY POSSIBLE IN UX.
Are you trying to say that the option should not exist there? Why parameter should not be used for the password??? Storing credentials in Azure Key Vault is another option, but it's not possible if you want to make LS generic (like in this example). This is clearly BUG - please reopen the issue.
@shawnxzq I agree with @NowinskiK obviously. If it is possible to configure ADF this way and everything is working (which it is) in the ADF, then if another tool cannot handle this it is a bug in the other tool, not a misconfiguration in the ADF itself.
We can work store everything in the Key Vault for now, but other customers will stumble upon the same issue sooner or later if it is not fixed.
@shawnxzq hasn't had a chance to answer as closed threads are not monitoring by their system. I spoke to him and here is more clarification on this issue:
Using AKV credential and parameterize the AKV credential name is the recommended way to parameterize credentials in ADF, the guideline is not to parameterize the credential directly in ADF from security perspective. However, the UX supports it due to some historic reasons and we need to keep it there for compatibility reasons, the PS/SDK never supports it. So, I strongly suggest you using AKV if you really need credential parameterization. From our side, we will check whether we can add reminders in document or UX first.
I just had a painful time recovering from this, including disconnecting adf from git in order to delete the offending linked services.
Description
Hi, @NowinskiK discovered this bug here: https://github.com/SQLPlayer/azure.datafactory.tools/issues/85 When I run
Get-AzDataFactoryV2LinkedService
against my ADF, I get an error due to the linked service below. If you need any more information, please let me know! ThanksEnvironment data
Module versions
I am running this from DevOps, Microsoft hosted agent, the only thing I install is:
Debug output
Error output