Settings for using Azure Blob Storage

Access permissions for containers and objects

When using an account SAS to upload objects to Azure Blob Storage or download objects from Azure Blob Storage, specify the account SAS permissions as shown in the table below.

For details on how to grant permissions, refer to the respective Azure documents provided by Microsoft.

When using the upload function, the required permissions are the same whether "New Creation" or "Replace" is specified for Registration Mode in the Receive Management Information.

Table 3.5 Required permissions for object upload

Receive Management Information

Service

Resource

Permission

Registration Mode

New Creation

Blob

Container
Object

Read
Write

Replace

Table 3.6 Required permissions for object download

Service

Resource

Permission

Blob

Object

Read

Settings to access Azure Blob Storage

Specify the system environment variables for the OS of the receiving-side host or sending-side host so that the HULFT Cloud Storage Option plug-in can access Azure Blob Storage.

Table 3.7 Environment variables for using Azure Blob Storage

Environment Variable Name

Description

AZURE_STORAGE_ACCOUNT

Storage account name of the user who performs the upload

AZURE_STORAGE_KEY (*1)

Primary or secondary access key for the above account name

AZURE_STORAGE_SAS_TOKEN (*1)

Token for access control

*1

:

Either AZURE_STORAGE_KEY or AZURE_STORAGE_SAS_TOKEN must be set. If both are set, only the value for AZURE_STORAGE_SAS_TOKEN is used.

 

Specifying the environment variables below may cause HULFT Cloud Storage Option to operate improperly. For this reason, do not use the following values:

  • SSL_SERT_FILE

  • SSL_CERT_DIR

 

For details on how to get an account name and access key and how to create an SAS token, refer to the respective documents provided by Azure.

For details on how to configure the settings, refer to the following:

For HULFT8 for Windows:

Access authentication settings for object storage (Windows)

For HULFT8 for Linux:

Access authentication settings for object storage (Linux)