Disable shared key access on test storage account

Azure / iot-identity-service

Source of the Azure IoT Identity Service and related services.

MIT License

37 stars 46 forks source link

Disable shared key access on test storage account #619

Open damonbarry opened 3 months ago

damonbarry commented 3 months ago

We create a temporary storage account for use by an Azure Function in the scheduled and manual end-to-end tests. Per best practices, we want to create it with shared key access disabled. This change updates the Azure CLI command that creates the storage account.

damonbarry commented 3 months ago

Disabling shared key access on the storage account breaks the Azure Functions app we deploy to host a DPS custom allocation policy.

There is apparently a way to run the Azure Functions app with storage keys disabled (using an identity), but it seems to require a labrynth of settings and workarounds. It may take some time to get this all sorted out.