Airlock Azure Function Host Storage Access with Managed Identity

[tamirkamara]

What is being addressed

The azure function that serves the airlock feature uses its host storage with a shared access key which is less secure.

How is this addressed

• It took a while to find this undocumented way to direct the function to use the user-assigned managed identity it already has.

[github-actions]

Unit Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit a596f4c.

♻️ This comment has been updated with latest results.

[tamirkamara]

/test-extended

[github-actions]

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12851174798 (with refid b62c5abf)

(in response to this comment from @tamirkamara)

[marrobi]

LGTM. Took some time to start working.

[tamirkamara]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/13096406243 (with refid b62c5abf)

(in response to this comment from @tamirkamara)

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/13096406243 (with refid b62c5abf)

(in response to this comment from @tamirkamara)

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/13096406243 (with refid b62c5abf)

(in response to this comment from @tamirkamara)

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/13096406243 (with refid b62c5abf)

(in response to this comment from @tamirkamara)

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/13096406243 (with refid b62c5abf)

(in response to this comment from @tamirkamara)

[tamirkamara]

/test-extended

[github-actions]

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/13129532316 (with refid b62c5abf)

(in response to this comment from @tamirkamara)