Microsoft Azure Blob Storage

To publish IBI-aws messages in Azure Blob Storage, the following steps are necessary:

Set up Azure Blob Storage

Create storage account

1. Under Azure services, navigate to Storage accounts.

2. Click on the Create button.

3. Basics tab: Select your subscription and choose a name for your storage account. Further settings such as region, performance and redundancy can be specified.

4. The default settings can be used in the remaining tabs (Advanced, Network, Privacy, Encryption, Tags tab).

5. Switch to the Check + create tab, check your settings and click Create.

For details on creating a storage account, see https://learn.microsoft.com/en-us/azure/storage/common/storage-account-create?tabs=azure-portal

Create container

1. Go to Storage accounts and open the newly created storage account.

2. Switch to Containers. This menu item is subordinate to the Data storage item in the left-hand menu bar.

3. Click on the + Container button.

4. Assign a name for the container and define further settings if necessary. Click on Create.

Details on managing containers can be found athttps://learn.microsoft.com/en-us/azure/storage/blobs/blob-containers-portal?source=recommendations

Determine the URL of the container

The URL of the container is entered in the Azure Blob Storage endpoint in the IBI-aws Admin.

1. Open the previously created container.

2. Switch to Properties. This menu item is subordinate to Settings in the left menu bar.

3. Apply URL (e.g.: https://mystorageaccount.blob.core.windows.net/mycontainer).

Create Shared Access Signature (SAS) Token

SAS tokens are entered in the Azure Blob Storage endpoint.

SAS tokens authorize the owner to access the Azure Blob Storage. These have specific authorizations (create, read, write, etc.) and an expiration date. You can find out more about SAS tokens at https://learn.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature.

Two tokens must be stored for the Azure Blob Storage endpoint. One token for the IBI-aws Admin and one for the Client. The tokens must be created with the following authorizations:

• IBI-aws Admin: read, write, delete

• IBI-aws Client: read

SAS tokens can be created as follows:

1. Navigate to your previously created container and open Shared access tokens. This menu item is subordinate to the Settings item in the left-hand menu bar.

2. Two signature methods are now available in the form for creating a SAS token:

   1. Account key (details under https://learn.microsoft.com/en-us/rest/api/storageservices/create-account-sas)

   2. User delegation key (details under https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas)

3. Regardless of the signature method selected, the following details must be entered:

   1. Permissions: Select the authorizations that the respective token should contain.

   2. Start: Time from which the token should be valid.

   3. Expiry: Time at which the token should expire.

   4. Permitted IP addresses: IP addresses from which requests are accepted.

   5. Permitted protocols: Specifies whether requests must be made via HTTPS or whether the HTTPS and HTTP protocols are permitted.

4. Generate token and take the value from the Blob SAS token field.
   Example: sp=r&st=2024-02-01T14:32:45Z&se=2024-08-01T21:32:45Z&spr=https&sv=2022-11-02&sr=c&sig=Yuku%2B%2BIBasdfsasdfwefrGR17pKiYnbeJfSYnj9FIrs%3D)

Set up IBI-aws Admin

IBI.aws.Client.exe ".\settings.iacabss"

IBI.aws.Client.exe ".\remarks.ibi" /AdditionalRemarks ".\settings.iacabss"