Storage account access keys
Access to storage accounts can be done with Azure AD (RBAC) or storage account access keys. Role-based may be the preferred way, but very often, requirements dictate that we need to use shared keys. Settings for access keys for storage accounts are shown in the following screenshot:
Figure 9.12 – Storage account access keys
You can notice that there are two keys present. It is recommended that keys are rotated regularly or in case keys are compromised. We can even set a reminder to rotate keys daily, weekly, monthly, yearly, or for a custom period (the default custom period is 60 days). A reminder for key rotation is shown in the following screenshot:
Figure 9.13 – Reminder to rotate access keys
In case we suspect our keys are compromised, we would rotate the secondary key and update our application with a new key. Then, we would rotate the primary key as well and update our application to...
