How to use MSI authentication in IaaSDiagnostics extension

Question

IaaSDiagnostics extension uses storage keys. Documentation here: https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/diagnostics-template#add-the-azure-diagnostics-extension-to-the-vm-resource-definition

"protectedSettings": { "storageAccountName": "[parameters('existingdiagnosticsStorageAccountName')]", "storageAccountKey": "[listkeys(variables('accountid'), '2015-05-01-preview').key1]", "storageAccountEndPoint": "https://core.windows.net"

I want to use MSI instead. How do I switch to MSI authentication?

Answer 1

Hi Manoj,

You would need to modify your configuration to use Managed Identity instead of storage keys.

1. Enable MI: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-windows-install
2. Assign Role to MI: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-windows-install
3. you would remove the storageAccountKey and storageAccountName from the protectedSettings section. Instead, you would add storageAccountResourceId, which is the Resource ID of the storage account. https://learn.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-windows-install

|-------------------------------->>> If the reply was helpful please don't forget to upvote and/or accept as answer, thank you