- 
                Notifications
    
You must be signed in to change notification settings  - Fork 5k
 
Description
I would like to use the Filebeat daemon with the "AzureBlobStorage Input" module in my project. Unfortunately the project only supports a few authentication methods (including OAuth and SAS tokens). Those methods require generating tokens or creating additional identities (Service Principal Names). I would like to use the native identity of my Azure machine/container (managed identity). The Go SDK libraries provided by Microsoft natively support this functionality. Description here
Adding this capability would allow use of native identities for Azure resources (Azure Functions, Web Apps, Virtual Machines, AKS and others). It will increase security and simplify assigning RBAC permissions.
Please implement ManagedIdentityCredential() in this module. It could work by adding an extra switch in the configuration, e.g. auth.ManagedIdentityCredential = true , which uses the Microsoft SDK to load a token for the managed identity.