Managed Identity w/Azure Functions and Storage accounts

Question

What is the appropriate way to use managed identity with Azure Functions and Storage accounts if the the AzureWebJobsStorage app setting is required by the function host? Is there a managed identity version of the storage account connection string that doesn't include the access key?

Answer 1

While you can't use Managed Identity to authenticate to the storage account directly, you can store the access key in Key Vault and fetch it from there using Key Vault References using Managed Identity.

Just wanted to share this because I believe its great to use KeyVault References instead of directly using access keys in the app settings.