location_azure_blobs
Creates, updates, deletes, gets or lists a location_azure_blobs resource.
Overview
| Name | location_azure_blobs |
| Type | Resource |
| Id | aws.datasync.location_azure_blobs |
Fields
The following fields are returned by SELECT queries:
- describe_location_azure_blob
| Name | Datatype | Description |
|---|---|---|
access_tier | string | The access tier that you want your objects or files transferred into. This only applies when using the location as a transfer destination. For more information, see Access tiers. (HOT, COOL, ARCHIVE) |
agent_arns | array | The ARNs of the DataSync agents that can connect with your Azure Blob Storage container. |
authentication_type | string | The authentication method DataSync uses to access your Azure Blob Storage. DataSync can access blob storage using a shared access signature (SAS). (SAS, NONE) |
blob_type | string | The type of blob that you want your objects or files to be when transferring them into Azure Blob Storage. Currently, DataSync only supports moving data into Azure Blob Storage as block blobs. For more information on blob types, see the Azure Blob Storage documentation. (BLOCK) |
cmk_secret_config | object | Describes configuration information for a DataSync-managed secret, such as an authentication token that DataSync uses to access a specific storage location, with a customer-managed KMS key. |
creation_time | string (date-time) | The time that your Azure Blob Storage transfer location was created. |
custom_secret_config | object | Describes configuration information for a customer-managed secret, such as an authentication token that DataSync uses to access a specific storage location, with a customer-managed Identity and Access Management (IAM) role that provides access to the secret. |
location_arn | string | The ARN of your Azure Blob Storage transfer location. (pattern: <code>^arn:(aws|aws-cn|aws-us-gov|aws-eusc|aws-iso|aws-iso-b):datasync:[a-z-0-9]+:[0-9]{12}:location/loc-[0-9a-z]{17}$</code>) |
location_uri | string | The URL of the Azure Blob Storage container involved in your transfer. (pattern: <code>^(efs|nfs|s3|smb|hdfs|fsx[a-z0-9-]+)://[a-zA-Z0-9.:/-]+$</code>) |
managed_secret_config | object | Describes configuration information for a DataSync-managed secret, such as an authentication token that DataSync uses to access a specific storage location. DataSync uses the default Amazon Web Services-managed KMS key to encrypt this secret in Secrets Manager. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
describe_location_azure_blob | select | region | Provides details about how an DataSync transfer location for Microsoft Azure Blob Storage is configured. | |
create_location_azure_blob | insert | region, ContainerUrl, AuthenticationType | Creates a transfer location for a Microsoft Azure Blob Storage container. DataSync can use this location as a transfer source or destination. You can make transfers with or without a DataSync agent that connects to your container. Before you begin, make sure you know how DataSync accesses Azure Blob Storage and works with access tiers and blob types. | |
update_location_azure_blob | update | region, LocationArn | Modifies the following configurations of the Microsoft Azure Blob Storage transfer location that you're using with DataSync. For more information, see Configuring DataSync transfers with Azure Blob Storage. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- describe_location_azure_blob
Provides details about how an DataSync transfer location for Microsoft Azure Blob Storage is configured.
SELECT
access_tier,
agent_arns,
authentication_type,
blob_type,
cmk_secret_config,
creation_time,
custom_secret_config,
location_arn,
location_uri,
managed_secret_config
FROM aws.datasync.location_azure_blobs
WHERE region = '{{ region }}' -- required
;
INSERT examples
- create_location_azure_blob
- Manifest
Creates a transfer location for a Microsoft Azure Blob Storage container. DataSync can use this location as a transfer source or destination. You can make transfers with or without a DataSync agent that connects to your container. Before you begin, make sure you know how DataSync accesses Azure Blob Storage and works with access tiers and blob types.
INSERT INTO aws.datasync.location_azure_blobs (
ContainerUrl,
AuthenticationType,
SasConfiguration,
BlobType,
AccessTier,
Subdirectory,
AgentArns,
Tags,
CmkSecretConfig,
CustomSecretConfig,
region
)
SELECT
'{{ ContainerUrl }}' /* required */,
'{{ AuthenticationType }}' /* required */,
'{{ SasConfiguration }}',
'{{ BlobType }}',
'{{ AccessTier }}',
'{{ Subdirectory }}',
'{{ AgentArns }}',
'{{ Tags }}',
'{{ CmkSecretConfig }}',
'{{ CustomSecretConfig }}',
'{{ region }}'
RETURNING
location_arn
;
# Description fields are for documentation purposes
- name: location_azure_blobs
props:
- name: region
value: "{{ region }}"
description: Required parameter for the location_azure_blobs resource.
- name: ContainerUrl
value: "{{ ContainerUrl }}"
description: |
Specifies the URL of the Azure Blob Storage container involved in your transfer.
- name: AuthenticationType
value: "{{ AuthenticationType }}"
description: |
Specifies the authentication method DataSync uses to access your Azure Blob Storage. DataSync can access blob storage using a shared access signature (SAS).
valid_values: ['SAS', 'NONE']
- name: SasConfiguration
description: |
Specifies the SAS configuration that allows DataSync to access your Azure Blob Storage. If you provide an authentication token using SasConfiguration, but do not provide secret configuration details using CmkSecretConfig or CustomSecretConfig, then DataSync stores the token using your Amazon Web Services account's secrets manager secret.
value:
Token: "{{ Token }}"
- name: BlobType
value: "{{ BlobType }}"
description: |
Specifies the type of blob that you want your objects or files to be when transferring them into Azure Blob Storage. Currently, DataSync only supports moving data into Azure Blob Storage as block blobs. For more information on blob types, see the Azure Blob Storage documentation.
valid_values: ['BLOCK']
- name: AccessTier
value: "{{ AccessTier }}"
description: |
Specifies the access tier that you want your objects or files transferred into. This only applies when using the location as a transfer destination. For more information, see Access tiers.
valid_values: ['HOT', 'COOL', 'ARCHIVE']
- name: Subdirectory
value: "{{ Subdirectory }}"
description: |
Specifies path segments if you want to limit your transfer to a virtual directory in your container (for example, /my/images).
- name: AgentArns
value:
- "{{ AgentArns }}"
description: |
(Optional) Specifies the Amazon Resource Name (ARN) of the DataSync agent that can connect with your Azure Blob Storage container. If you are setting up an agentless cross-cloud transfer, you do not need to specify a value for this parameter. You can specify more than one agent. For more information, see Using multiple agents for your transfer. Make sure you configure this parameter correctly when you first create your storage location. You cannot add or remove agents from a storage location after you create it.
- name: Tags
description: |
Specifies labels that help you categorize, filter, and search for your Amazon Web Services resources. We recommend creating at least a name tag for your transfer location.
value:
- Key: "{{ Key }}"
Value: "{{ Value }}"
- name: CmkSecretConfig
description: |
Specifies configuration information for a DataSync-managed secret, which includes the authentication token that DataSync uses to access a specific AzureBlob storage location, with a customer-managed KMS key. When you include this parameter as part of a CreateLocationAzureBlob request, you provide only the KMS key ARN. DataSync uses this KMS key together with the authentication token you specify for SasConfiguration to create a DataSync-managed secret to store the location access credentials. Make sure that DataSync has permission to access the KMS key that you specify. For more information, see Using a service-managed secret encrypted with a custom KMS key. You can use either CmkSecretConfig (with SasConfiguration) or CustomSecretConfig (without SasConfiguration) to provide credentials for a CreateLocationAzureBlob request. Do not provide both parameters for the same request.
value:
SecretArn: "{{ SecretArn }}"
KmsKeyArn: "{{ KmsKeyArn }}"
- name: CustomSecretConfig
description: |
Specifies configuration information for a customer-managed Secrets Manager secret where the authentication token for an AzureBlob storage location is stored in plain text, in Secrets Manager. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. For more information, see Using a secret that you manage. You can use either CmkSecretConfig (with SasConfiguration) or CustomSecretConfig (without SasConfiguration) to provide credentials for a CreateLocationAzureBlob request. Do not provide both parameters for the same request.
value:
SecretArn: "{{ SecretArn }}"
SecretAccessRoleArn: "{{ SecretAccessRoleArn }}"
UPDATE examples
- update_location_azure_blob
Modifies the following configurations of the Microsoft Azure Blob Storage transfer location that you're using with DataSync. For more information, see Configuring DataSync transfers with Azure Blob Storage.
UPDATE aws.datasync.location_azure_blobs
SET
LocationArn = '{{ LocationArn }}',
Subdirectory = '{{ Subdirectory }}',
AuthenticationType = '{{ AuthenticationType }}',
SasConfiguration = '{{ SasConfiguration }}',
BlobType = '{{ BlobType }}',
AccessTier = '{{ AccessTier }}',
AgentArns = '{{ AgentArns }}',
CmkSecretConfig = '{{ CmkSecretConfig }}',
CustomSecretConfig = '{{ CustomSecretConfig }}'
WHERE
region = '{{ region }}' --required
AND LocationArn = '{{ LocationArn }}' --required;