question

sakuraime avatar image
0 Votes"
sakuraime asked sakuraime commented

Log analytics reading csv from blob

I am going to upload some csv to blob storage , and use log analytics to view it
102060-sas.jpg




from Log analytics to access blob storage , can only use sas ? how can we hide this sas ??

azure-monitor
sas.jpg (45.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

SwathiDhanwada-MSFT avatar image
0 Votes"
SwathiDhanwada-MSFT answered sakuraime commented

@sakuraime As far as I know , SAS token can't be hidden in this scenario. The recommendation is when using a user delegation SAS token in the connection string, the AAD principal which the operation is executed on-behalf-of must be assigned (minimally) the Storage Blob Data Reader role for read operations, or Storage Blob Data Contributor for write (for example, export) operations.

You can check Obfuscated String literals concept in kusto which can be applied, when querying the tables using secret information such as SAS.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

oh ... you mean something like passthrough authentication to blob storage ?

0 Votes 0 ·