let uai_name = Utils.get_uai_name(container.id, env_id, region)
            let uai = new azure.msi.UserAssignedIdentity(uai_name, {
                    name: uai_name,
                    resourceGroupName: uai_resource_group_name,
                    location: definition_map.region_map[region]['name'],
                    tags: {
                        'manifiest_id': container.id,
                        'env_id': env_id,
                        'resource_type': 'storage',
                        'region': definition_map.region_map[region]['name'],
                        'location': definition_map.region_map[region]['name'],
                        'resource_region': storage.region,
                        'resource_account': storage_account_name_parsed,
                        'resource_container': container.name
                    }                
                }
            );

            let assignment_scope = Utils.get_resource_scope('st', String(azure_config.subscriptionId), storage_resource_group_name, storage_account_name_parsed, container.name);
            let assignment_id = Utils.get_uai_assignment_id(container.id, env_id, definition_map.region_map[region]['number'])

            let storage_container_assignment = new azure.role.Assignment(assignment_id, {
                    name: assignment_id,
                    principalId: uai.principalId,
                    roleDefinitionId: blob_reader_role_definition.id,
                    scope: assignment_scope
                },
                { dependsOn: uai }
            );