How to Use System-Assigned Managed Identity for Secure Access to Blob Storage in Synapse Notebook?

Vaibhav Patil 255

Hello Community,

I'm currently working on a project in Azure Synapse Analytics and would like to enhance the security of my data access. My Python code in the Synapse notebook currently accesses Blob Storage using a connection string, but I want to switch to using a system-assigned managed identity for passwordless access.

Could you please provide the steps to configure and use a system-assigned managed identity for accessing Blob Storage securely within a Synapse notebook?
Any code examples or configuration tips would be greatly appreciated!

Pls don't sent me a chatgpt prompt

Thank you in advance for your help!

Chandra Boorla 5,755 Reputation points Microsoft Vendor

2024-10-29T18:01:20.4333333+00:00

Hi @Vaibhav Patil

Just checking in to see if the below answer provided by @ Deepanshukatara-6769 helped.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

1 answer

Deepanshu katara 12,635 Reputation points

2024-10-28T12:36:21.5033333+00:00
Hello Vaibhav, Welcome to MS Q&A

To configure and use a system-assigned managed identity for accessing Blob Storage securely within a Synapse notebook, follow these steps:

Enable Managed Identity: Ensure that your Synapse workspace has a system-assigned managed identity. This is usually enabled by default for the workspace.

Assign Role to Managed Identity:

Navigate to your Blob Storage account in the Azure portal.

Go to the "Access control (IAM)" section.

Click on "Add" and then "Add role assignment".

Assign the role of "Storage Blob Data Contributor" to the managed identity associated with your Synapse workspace.

Use Managed Identity in Synapse Notebook:

When running your Spark notebooks, enable "Run as managed identity" from the Configure session menu.

You can now access Blob Storage using the managed identity without needing to manage credentials manually.

Please let me know if you have any other questions

Kindly accept answer if you think not a chatgpt response :)

References:

Managed identity for Azure Synapse

Securely load data using Synapse SQL

Thanks

Deepanshu
Please sign in to rate this answer.
Chandra Boorla 5,755 Reputation points Microsoft Vendor

2024-10-30T20:30:00.6366667+00:00

Hi @Vaibhav Patil

Just checking in to see if the above answer provided by @ Deepanshukatara-6769 helped.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Haria, Neel 0 Reputation points

2024-12-04T19:13:42.39+00:00

I was working on something similar, I followed the same steps provided here. However this solution does not work for me.

The error I see is:

ImdsCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint. ManagedIdentityCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint. ImdsCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint. ManagedIdentityCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint. ImdsCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint. ManagedIdentityCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint. ImdsCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint. ManagedIdentityCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint.

Chandra Boorla 5,755 Reputation points Microsoft Vendor

2024-12-05T01:12:00.8666667+00:00

Hi @Haria, Neel

Since this thread is too old, I would recommend creating a new thread on the same forum with as much details about your issue as possible. That would make sure that your issue has better visibility in the community.

Thank you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to Use System-Assigned Managed Identity for Secure Access to Blob Storage in Synapse Notebook?

1 answer

Your answer