-
Notifications
You must be signed in to change notification settings - Fork 83
Description
Currently, reading a json file from Azure Blob Storage uses the Get-AzStorageContainer function which requires permission to list containers on storage. In the case of saving changes, the Set-AzStorageBlobContent function is used which refers directly to the file and the permission to list containers is not needed.
Is your feature request related to a problem? Please describe.
The service principal that I have does not have permission to list containers, which is why I get the error
"##[error]This request is not authorized to perform this operation using this permission."
and I have a problem with using the Incremental Deployment functionality.
Describe the solution you'd like
I propose replacing the Get-AzStorageContainer function with the Get-AzStorageBlobContent function (or another one) which would require less permissions - it would read the file directly from the path (container).
DeploymentState.class.ps1
Additional context
In the organization, the permission to list containers is not granted, which is why we have a problem using Incremental Deployment.