Skip to content

Commit 9578dbe

Browse files
authored
Merge pull request #249676 from pauljewellmsft/pauljewell-go
Update Go client library quickstart
2 parents b96fad1 + a650e42 commit 9578dbe

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

articles/storage/blobs/storage-quickstart-blobs-go.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ titleSuffix: Azure Storage
44
description: In this quickstart, you learn how to use the Azure Blob Storage client library for Go to create a container and a blob in Blob (object) storage. Next, you learn how to download the blob to your local computer, and how to list all of the blobs in a container.
55
author: pauljewellmsft
66
ms.author: pauljewell
7-
ms.date: 02/13/2023
7+
ms.date: 08/29/2023
88
ms.service: azure-blob-storage
99
ms.topic: quickstart
1010
ms.devlang: golang
@@ -54,9 +54,11 @@ go get github.com/Azure/azure-sdk-for-go/sdk/azidentity
5454

5555
## Authenticate to Azure and authorize access to blob data
5656

57-
[!INCLUDE [storage-quickstart-passwordless-auth-intro](../../../includes/storage-quickstart-passwordless-auth-intro.md)]
57+
Application requests to Azure Blob Storage must be authorized. Using `DefaultAzureCredential` and the Azure Identity client library is the recommended approach for implementing passwordless connections to Azure services in your code, including Blob Storage.
5858

59-
`DefaultAzureCredential` is a class provided by the Azure Identity client library for Go. `DefaultAzureCredential` supports multiple authentication methods and determines which method to use at runtime. This approach enables your app to use different authentication methods in different environments (local vs. production) without implementing environment-specific code.
59+
You can also authorize requests to Azure Blob Storage by using the account access key. However, this approach should be used with caution. Developers must be diligent to never expose the access key in an unsecure location. Anyone who has the access key is able to authorize requests against the storage account, and effectively has access to all the data. `DefaultAzureCredential` offers improved management and security benefits over the account key to allow passwordless authentication. Both options are demonstrated in the following example.
60+
61+
`DefaultAzureCredential` is a credential chain implementation provided by the Azure Identity client library for Go. `DefaultAzureCredential` supports multiple authentication methods and determines which method to use at runtime. This approach enables your app to use different authentication methods in different environments (local vs. production) without implementing environment-specific code.
6062

6163
To learn more about the order and locations in which `DefaultAzureCredential` looks for credentials, see [Azure Identity library overview](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#DefaultAzureCredential).
6264

0 commit comments

Comments
 (0)