[CAMEL-18099] Azure blob component does not support MS recommended auth. strategy

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.16.0
• Fix Version/s: 3.18.0
• Component/s: camel-azure
• Labels: enhancement

Environment

MS Azure

• Estimated Complexity: Unknown

Language

english

• Assignee: Unassigned
• Reporter: Hugo Veillette
• Created: 11/May/22 16:59
• Updated: 18/May/22 05:57
• Resolved: 18/May/22 05:57

Description

The "Azure storage blob service" Camel component only supports access key as mean of access authorization. This strategy is discouraged according to MS. 

https://docs.microsoft.com/en-us/azure/storage/common/authorize-data-access?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json#understand-authorization-for-data-operations

Microsoft recommends that you disallow Shared Key authorization for your storage account.

The MS Azure blob library, in combination with Azure-Identity library, enable preferred means to authenticate to a blob storage.  Namely, SAS token and Azure Identity.

This issue is a feature request to add support for recommended options (SAS and Azure Identity)  to the Camel  "Azure storage blob service" component.

Suggestion is to default to the "DefaultAzureCredentialBuilder" when no specific authorization strategy is provided.

azure-sdk-for-java/README.md at main · Azure/azure-sdk-for-java (github.com)

Issue Links

• links to: GitHub Pull Request #7615