Share via

Connect Azure CDN Premium from Verizon to Blob Storage using Managed Identity in order to read blobs from a private container?

Yanet Morales 20 Reputation points
2023-08-21T18:37:05.5066667+00:00

Is it possible for Azure CDN Premium from Verizon to connect to Blob Storage using Managed Identity in order to read blobs from a private container?

I connected Azure CDN Premium from Verizon to read Blobs from a private container using SAS tokens with the Rules engine and the Rewrite URL condition. This worked perfectly fine.

However, I'm concerned about the SAS approach is that it has an expiration date and it could become invalid at some point. I'd like to authenticate the Azure CDN against the Blob with Managed Identity for read-only purposes only. Is that supported?

Azure Storage
Azure Storage
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,545 questions
Accepted answer
  1. Andriy Bilous 11,821 Reputation points MVP Volunteer Moderator
    2023-08-22T12:35:46.4866667+00:00

    Hello @Yanet Morales

    Managed Identity is not integrated between Azure CDN and storage yet. Azure CDN Premium supports Private Link, which can be used to access storage privately.
    Using Azure CDN Premium created, create private link service and WAF policy and select custom origin type and enable private link service like below:

    enter image description here

    enter image description here

    Created a private endpoint in Azure storage account to access securely and select the pending private endpoint request from Azure CDN Premium then select Approve like below:

    enter image description here

    enter image description here

    Once the Azure CDN created with host name storage account blob will access private blobs securely:

    enter image description here

    References:

    Connect Azure Front Door Premium to a storage account origin with Private Link - Azure Private Link | Microsoft Learn

    Secure your Origin with Private Link in Azure Front Door Premium | Microsoft Learn

    https://stackoverflow.com/questions/76663262/azure-front-door-managed-identify-to-read-storage-blob-authorization-error

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.