Azure Blob Storage
Connect Azure Blob Storage to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Azure Blob Storage connection as cloud storage provider evidence. Automated collection is not available for this provider yet.
| Category | Cloud Storage Provider |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Azure Blob Storage:
- In the Azure portal (portal.azure.com), go to your storage account.
- From the resource menu under Security + networking, select Access keys.
- Select Show keys to reveal the access keys and connection strings.
- Under key1, find the Key value and select the Copy button. Paste it into Safeguard as the token.
- To view the keys, your Azure user needs a role that includes Microsoft.Storage/storageAccounts/listkeys/action: the built-in Owner, Contributor or Storage Account Key Operator Service Role.
Where to find the other values:
- Account / Org / Workspace (optional): The storage account name is the resource you open in the Azure portal; it also appears in the Connection string under Security + networking › Access keys.
- Base URL (optional): Not stated on the fetched page.
Azure Blob Storage's public documentation does not cover every step.
Storage account access keys give full access to the account's data; Microsoft documents no read-only access key. Microsoft recommends Microsoft Entra ID or a user delegation SAS instead of Shared Key where possible. The keys can be shown again at any time from the Access keys page. The exact location of the blob endpoint URL in the portal was not confirmed from a fetched page; Shared Key authorization may also be disabled on the account, in which case the key will not work.
Source: learn.microsoft.com, checked 2026-10-07.
-
On Compliance › Connectors, open Azure Blob Storage, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
No automated compliance test reads Azure Blob Storage yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.
Related
- Cloud Storage Provider connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks