Azure Functions to Storage Queue using Identity-based connections

Photo by Christina @ wocintechchat.com on Unsplash

Using managed identity with Azure Functions offers several benefits, including improved security, simplified authentication, and reduced management overhead.

Using Managed Identity instead of using a connection string with Accountkey is part of best practices.

What this being said, let’s connect the Azure function to Azure Queue Storage without any connection string.

The steps are straightforward:

• Create a Managed Identity for the Azure Function. In my case, I am using a System Assign identity.

Azure function System Assign Identity

• Go to your Storage Account and add the following role: “Storage Queue Data Message Processor”, and assign it to your Azure function

Add Storage Queue Data Message Processor role

• Go back to your Azure function, Configurations, and configure the Identity-based connections. More details can be found here.