Skip to content

Commit 5445f5d

Browse files
authored
Merge pull request #106265 from santoshc1/master
Adding Cognitive Search and Data Share to trusted services list.
2 parents 64f250a + 1a59e6c commit 5445f5d

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

articles/storage/common/storage-network-security.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -382,12 +382,14 @@ When you enable the **Allow trusted Microsoft services...** setting, resources o
382382
383383
The **Allow trusted Microsoft services...** setting also allows a particular instance of the below services to access the storage account, if you explicitly [assign an RBAC role](storage-auth-aad.md#assign-rbac-roles-for-access-rights) to the [system-assigned managed identity](../../active-directory/managed-identities-azure-resources/overview.md) for that resource instance. In this case, the scope of access for the instance corresponds to the RBAC role assigned to the managed identity.
384384
385-
| Service | Resource Provider Name | Purpose |
386-
| :----------------------------- | :------------------------------------- | :---------- |
385+
| Service | Resource Provider Name | Purpose |
386+
| :----------------------------- | :------------------------------------- | :----------------- |
387+
| Azure Cognitive Search | Microsoft.Search/searchServices | Enables Cognitive Search services to access storage accounts for indexing, processing and querying. |
387388
| Azure Container Registry Tasks | Microsoft.ContainerRegistry/registries | ACR Tasks can access storage accounts when building container images. |
388389
| Azure Data Factory | Microsoft.DataFactory/factories | Allows access to storage accounts through the ADF runtime. |
389-
| Azure Logic Apps | Microsoft.Logic/workflows | Enables logic apps to access storage accounts. [Learn more](../../logic-apps/create-managed-service-identity.md#authenticate-access-with-managed-identity). |
390-
| Azure Machine Learning | Microsoft.MachineLearningServices | Authorized Azure Machine Learning workspaces write experiment output, models, and logs to Blob storage. [Learn more](/azure/machine-learning/service/how-to-enable-virtual-network#use-a-storage-account-for-your-workspace). |
390+
| Azure Data Share | Microsoft.DataShare/accounts | Allows access to storage accounts through Data Share. |
391+
| Azure Logic Apps | Microsoft.Logic/workflows | Enables logic apps to access storage accounts. [Learn more](/azure/logic-apps/create-managed-service-identity#authenticate-access-with-managed-identity.md). |
392+
| Azure Machine Learning Service | Microsoft.MachineLearningServices | Authorized Azure Machine Learning workspaces write experiment output, models, and logs to Blob storage. [Learn more](/azure/machine-learning/service/how-to-enable-virtual-network#use-a-storage-account-for-your-workspace). |
391393
| Azure SQL Data Warehouse | Microsoft.Sql | Allows import and export of data from specific SQL Database instances using PolyBase. [Learn more](/azure/sql-database/sql-database-vnet-service-endpoint-rule-overview). |
392394
| Azure Stream Analytics | Microsoft.StreamAnalytics | Allows data from a streaming job to be written to Blob storage. This feature is currently in preview. [Learn more](/azure/stream-analytics/blob-output-managed-identity). |
393395
| Azure Synapse Analytics | Microsoft.Synapse/workspaces | Enables access to data in Azure Storage from Synapse Analytics. |

0 commit comments

Comments
 (0)