This message was deleted.

sparse-intern-71089

05/05/2022, 3:05 PM

This message was deleted.

clean-truck-93285

05/05/2022, 9:14 PM

No examples, but ARM does not expose an API to make a stored access policy with IaC. Could look into adding a PowerShell task to your pipeline to generate the stored access policy. https://docs.microsoft.com/en-us/powershell/module/az.storage/new-azstoragecontainerstoredaccesspolicy?view=azps-7.5.0

damp-honey-93158

05/06/2022, 8:46 AM

That is valuable info, now it makes sense why I can't find the API calls 🙂 I'll take a look at your advice or just script the whole part - its a bootstrapping phase anyway so won't happen often (still don't like the taste but I don't have all day either). Thank you!

clean-truck-93285

05/06/2022, 12:20 PM

I spend more time reading the ARM documentation than on Pulumi registry. I also might be wrong, I looked at the blob service ARM yesterday. Not sure what the sasPolicy on the main storage account is. That might get you what you looking for. https://docs.microsoft.com/en-us/azure/templates/microsoft.storage/storageaccounts?tabs=bicep

damp-honey-93158

05/07/2022, 8:36 AM

instead I spent the day fighting with Azure - in terms of how to get a service principal to be created, such that it can be used by the rest of the pulumi service + pipeline for keyvault and resource creation and RBAC. Boy it was frustrating.

damp-honey-93158

05/07/2022, 8:37 AM

I might have it now though - next week will tell.

damp-honey-93158

05/07/2022, 8:37 AM

thank you for your answers and help!

6 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.