Instance roles for Azure vms

Question

Basically I'm trying to implement with Azure the following AWS pattern:

Assign an IAM role to an Vm (Aws instance equivalent)
Allow this role to access a certain container (AWS bucket equivalent) as read only and download from there

How it this possible with Azure?

I need to add Active Directory Domain Services role to a domain controller (VM). I can't find the role in IAM. — Mukus, Jul 24 '20 at 01:58

score 2 · Answer 1 · answered Oct 11 '17 at 17:04

You can do this in Preview with "Managed Service Identity" (MSI)

Linux doc here: https://learn.microsoft.com/en-us/azure/active-directory/msi-tutorial-linux-vm-access-storage

Windows doc here: https://learn.microsoft.com/en-us/azure/active-directory/msi-tutorial-windows-vm-access-storage

score 1 · Answer 2 · answered Sep 23 '17 at 03:34

1

The equivalent to IAM in AWS to Azure is Role-Based Access Control .

You can use Role-Based Access Control to manage access to your Azure subscription resources.

Also if you wish you can create custom roles you can refer this, Creating custom roles for Azure Role-Based Access Control.

You can refer this for custom user roles, Assign custom roles for internal and external users

answered Sep 23 '17 at 03:34

Jinesh Shah

922
10
18

Thanks but but those resources don't seem to support Assigning a role to a vm, Which is the actual question. Any clues about that? – alonisser Sep 23 '17 at 20:09

score 0 · Answer 3 · answered Sep 25 '17 at 08:57

Allow this role to access a certain container (AWS bucket equivalent) as read only and download from there.

For now, Azure does not support AD-based authentication or ACLs.

As a workaround, we can use shared access signatures (SAS).

A shared access signature (SAS) provides you with a way to grant limited access to objects in your storage account to other clients, without exposing your account key.

More information about Azure SAS, please refer to this link.

Instance roles for Azure vms

3 Answers3