:::{image} _images/azure.png :alt: Azure Blob Storage :width: 128px :::
Massively scalable object storage for unstructured data
Edit the hostname to connect to your account in the format <account>.blob.core.windows.net.
:::{warning} Azure Files Storage is not supported. :::
Obtain the login credentials Storage Account Name and Primary Access Key from portal.azure.com. You can find the keys in the section Access keys.
You can use a SAS when you want to provide access to resources in your storage account to any client not possessing your storage account's access keys.
:::{note} Connection profiles can be installed from Preferences → Profiles. :::
- {download}
Download<https://profiles.cyberduck.io/Azure%20(Shared%20Access%20Signature%20Token).cyberduckprofile>the Azure (Shared Access Signature Token) for preconfigured settings.
You can list all containers with Cyberduck CLI using
duck --username <storageaccount> --list azure://<storageaccount>.blob.core.windows.net/`
For a storage account named kahy9boj3eib that would be
duck --username kahy9boj3eib --list azure://kahy9boj3eib.blob.core.windows.net/
Refer to the Cyberduck CLI documentation for more operations.
You can edit ACLs in File → Info (macOS ⌘I Windows Alt+Return) → Permissions. To make objects in a container publicly accessible, choose Everyone → READ. Note that this applies to all files in a container.
To create a new container in your account, browse to the root and choose File → New Folder... (macOS ⇧⌘N Windows Ctrl+Shift+N).
Uploads are stored as append blob type by default. You can use the hidden configuration option azure.upload.blobtype which allows the values BLOCK_BLOB, PAGE_BLOB and APPEND_BLOB.
You can edit standard custom metadata. Choose File → Info → Metadata to edit custom headers.
Currently only possible using a hidden configuration option you can define default headers to be added for uploads. Multiple headers must be separated using a whitespace delimiter. Key and value of a header are separated with =. For example, if you want to add an HTTP header for Cache-Control and one named Creator you would set
azure.metadata.default="Cache-Control=public,max-age=86400 Creator=Cyberduck"
A private object stored in Azure Storage can be made publicly available for a limited time using a signed URL. The signed URL can be used by anyone to download the object, yet it includes a date and time after which the URL will no longer work. Copy the signed URL from Edit → Copy URL→ Signed URL.
:::{note} Currently only signed URLs with a validity of 24 hours are available. :::
Configure access logging for buckets in the Info panel.
:::{image} _images/Azure_tab_info_macOS.png :alt: Windows Azure Blob Storage :width: 500px :::
- Container and blob naming conventions.
- CDN configuration is currently only possible using the web interface.
Please follow the Naming and Referencing Containers, Blobs, and Metadata guidelines.