Skip to content

Commit 3c52e7f

Browse files
authored
Added script action section
Added script action section. Ref Apurba, Chinmens and Sushma.
1 parent 963ca4f commit 3c52e7f

File tree

1 file changed

+17
-2
lines changed

1 file changed

+17
-2
lines changed

articles/hdinsight/configure-azure-blob-storage.md

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Configure Azure Blob Storage on Azure HDInsight
33
description: Learn how to Configure Azure Blob storage on Azure HDInsight.
44
ms.service: azure-hdinsight
55
ms.topic: how-to
6-
ms.date: 11/15/2023
6+
ms.date: 11/25/2023
77

88
---
99
# Configure Azure Blob Storage as primary storage account in Azure HDInsight
@@ -82,7 +82,22 @@ Same thing can be achieved via ARM request if that is how you want to create HDI
8282
8383
}
8484
```
85-
85+
86+
## MSI based Script Action using primary Azure Blob Storage storage
87+
88+
Previously while adding the primary storage as Azure Blob Storage storage in the Azure HDInsight cluster, you can't provide MSI for authentication.
89+
Also to access a script action that is not accessible anonymously, you need to mention the SAS Key in the script action parameters, so the Azure HDInsight Cluster can access the script for execution.
90+
91+
Now, you can add Azure Blob Storage storage in Azure HDInsight cluster as a primary storage using MSI.
92+
93+
Hence there is no need to provide the SAS key in the script action parameters, while adding the script action, if the script uploaded to the primary Azure Blob Storage storage account.
94+
95+
The script will be downloaded and implemented. This will work even if the script is not publicly accessible.
96+
97+
The new feature specifically supports scripts that are not publicly accessible but do not require a SAS key or token. This provides an additional layer of security for scripts that need to be kept private.
98+
99+
The conventional script action in a storage which is anonymously accessible or if a SAS key is passed along with the script URI, will still work without any changes. For more inforation, see [Customize Azure HDInsight clusters by using script actions](./hdinsight/hdinsight-hadoop-customize-cluster-linux.md)
100+
86101
## Next steps
87102
88103
* [Use Azure Data Lake Storage Gen2 with Azure HDInsight clusters](./hdinsight-managed-identities.md)

0 commit comments

Comments
 (0)