DQC Logo
|

Connection to Azure Blob

To connect Azure Blob Storage to the DQC Platform, you can authenticate using an account key, SAS token, or service principal. This guide explains each method and outlines recommended security practices.


Add an Azure Blob connector

To begin:

  1. Navigate to the Data Connectors screen

  2. Click the Azure Blob button

  3. Select your preferred authentication method

  4. Enter the required values (see below)

Choose Azure Blob as your file-based data source.


Required Connection Information

Option 1: Account key authentication

Field

Example

Description

Name

DataLakeObjectStore

Internal name for the connection

Account name

username

Storage account username

Account key

secret_account_key

Storage key from Azure

Container path

abfs://my-container

Full URI to the blob container


Option 2: SAS token authentication

Field

Example

Description

SAS token

sp=rl&st=...&sig=...

Time-limited signed token string

Container path

abfs://my-container

URI to the specific blob container


Option 3: Service principal authentication

Field

Example

Description

Tenant ID

xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Azure AD directory identifier

Client ID

xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

App registration / principal identifier

Client secret

*************

Password (secret) for the app

Container path

abfs://my-container

Full URI to blob container


Recommended access configuration

To ensure secure integration, follow these best practices:

Use a dedicated minimal-privilege account

  • Create a dedicated service principal, storage user, or token

  • Avoid using owner or admin accounts

Grant read-only access

  • Limit the connected account to read-only permissions

  • Prevent unintended write, delete, or overwrite actions

Restrict scope

  • Configure access only for the required container

  • Use container-specific SAS tokens or scoped role assignments

Whitelist the DQC platform IP address

Allow inbound traffic from the DQC Platform's static IP:

3.123.94.228


undefined Notes

Connection to Azure Blob | DQC