No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Does the Azure Blob Storage backend support Shared Access Signature (SAS) tokens instead of Access Keys? I've had success running Pulumi against an Azure Storage backend by supplying an Access Key via the `AZURE_STORAGE_KEY` environment variable, but I haven't had success supplying an SAS token. Looking for something similar to Terraform's `sas_token` support: <https://www.terraform.io/docs/backends/types/azurerm.html#sas_token>

Currently exploring the `AZURE_STORAGE_SAS_TOKEN` environment variable since it looks like Pulumi uses: <https://godoc.org/gocloud.dev/blob/azureblob>

I haven’t used it myself - but indeed I would expect that to work. Curious - did it work out for you?

It appears Pulumi is trying to use the SAS token from `AZURE_STORAGE_SAS_TOKEN`, but so far I haven't been able to authenticate successfully. I'm not convinced I'm providing the correct value for the SAS token, though. I'll work on this more in the coming week and report back if I can get it working

Closing the loop: Using an Azure Blob Storage backend with a Shared Access Signature (SAS) mostly seems to work, but an error is returned. Filed an issue: <https://github.com/pulumi/pulumi/issues/3537>