No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

You should be able to set the `backend` in the project settings
I use S3 and KMS to encrypt the state. Here's an example in Python: <https://github.com/kjenney/prov/blob/main/prov/common.py#L65-L69>

The non-api starter is here: <https://cloud-right.com/2019/10/pulumi-azure-storage>

You should be able to use `azblob://` as your backend - replace `s3://` in my example

<@U02EAKDTQ8L> Thank you very much! That was exactly what I was looking for, and I did make some progress on it.

A new roadblock with this error, which was similar to what I got when the right envvariables were not set when using the CLI.

``` stderr: error: unable to open bucket <azblob://foobar>: azureblob.OpenBucket: accountName is required```
This is my code snippet:

```....
        backend_url = f"<azblob://foobar>"

        project_settings=auto.ProjectSettings(
            name=project_name,
            runtime="python",
            backend={"url": backend_url}
        )

        stack_settings=auto.StackSettings(
            secrets_provider=secrets_provider)

        workspace_opts = auto.LocalWorkspaceOptions(project_settings=project_settings,
                                                    secrets_provider=secrets_provider,
                                                    stack_settings={stack_name: stack_settings})

        stack = auto.create_or_select_stack(stack_name=stack_name,
            project_name=project_name,
            program=pulumi_program,
            opts=workspace_opts)
....```

I am clueless on how to pass `AZURE_STORAGE_KEY`, `AZURE_STORAGE_ACCOUNT`   using the automationAPI :disappointed:

If it's anything like the AWS provider (and I think it is) I believe you pass these as environment variables when running the script

I use `aws-vault` to manage my AWS session info but you should be able to either pass thru using the azure cli or just exporting them in your shell

:smile: all I had to do was `backend_url = f"<azblob://foobar/{accountname}>"`
Once again, Thanks a lot <@U02EAKDTQ8L> !

<@U02UEF1HTPH> did you figure out what to do with the storage account key? I'd like to set it in the code rather than an environment variable

Hi <@U014JNRGADD> I could not find a way one can set this is in code, but rather only env variable :disappointed: I think this has to do with the go client that is using the env variable to dial out.

If you do find a different way, please do share :slightly_smiling_face:

For the moment, for our case the env variable fits, but if can be done in code, I would prefer to do it this way too. But I couldnt find anything yet, and I think <@U02EAKDTQ8L> did the same. Don't want to go down that rabbit hole at the moment...