Not able to access Azure blob with service principal from ansible module azure_rm_storageblob

19 views
Skip to first unread message

Prakash Sharma

unread,
Jul 24, 2019, 3:14:28 AM7/24/19
to Ansible Project
Hello Experts , 

I am trying to download/upload blobs with ansible azure_rm_storageblob module in AWX ( I have tried in Ansible core too, got the same error) , and get below error 


Error getting keys for account XXXXXXXXX - Azure Error: AuthorizationFailed\nMessage: The client 'YYYYYYYYYYYYYYYYYYYYYY' with object id 'YYYYYYYYYYYYYYYYYYYYYYYYY' does not have authorization to perform action 'Microsoft.Storage/storageAccounts/listKeys/action' over scope '/subscriptions/ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ/resourceGroups/RG-DataEngineering-Dev/providers/Microsoft.Storage/storageAccounts/XXXXXXXXXXXXXX' or the scope is invalid. If access was recently granted, please refresh your credentials."


If I use the same service principal key in the python code , I am able to upload and download blobs without any error . 

I am wondering , when using service pricipal authentication with Azure , why it is doing listKeys operation. 

I hope someone will understand this issue or might have faced this, looking to hear back from them. 

regards,
Prakash. 

Prakash Sharma

unread,
Aug 2, 2019, 3:10:29 AM8/2/19
to Ansible Project
Hello , 

Has anyone tried to implement/access  azure storage with service principal or SAS key via ansible ?

Regards,
Prakash. 
Reply all
Reply to author
Forward
0 new messages