Airflow Connection Type Azure Blob Storage - Shared Access Key field

[manmeetkaur]

Apache Airflow version

Other Airflow 2 version (please specify below)

What happened

Airflow Version 2.5.2

Issue: Create a connection of type azure blob storage using the method #3 described in OSS docs.

When we use the storage account name and the access key as in the below screenshot, the connection works just fine.

Then what is the purpose of the extra field called Blob Storage Shared Access Key(Optional)? When I tried to put the access key in this field, then connection fails with the below error on testing:

invalid url http://

Code reference: https://github.com/apache/airflow/blob/main/airflow/providers/microsoft/azure/hooks/wasb.py#L190-L192

What you think should happen instead

No response

How to reproduce

• Create a Azure Storage account
• Go to Access Control (IAM), copy the key
• Spin up new local airflow environment using Astro CLI with runtime version 7.4.1
• Go to Airflow UI -> Admin -> Connections -> create a new connection of type Azure blob Storage
• Enter the name of the storage account in Blob Storage Login and the key copied from Azure to Blob Shared Access Key (Optional) and click on Test connection.

Operating System

Astro runtime 7.4.1 image on MacOS

Versions of Apache Airflow Providers

No response

Deployment

Astronomer

Deployment details

No response

Anything else

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[Adaverse]

Will take this up!

[potiuk]

feel free.

[Adaverse]

Then what is the purpose of the extra field called Blob Storage Shared Access Key(Optional)?

To answer above question, we neeed to look into the signature of BlobServiceClient -
BlobServiceClient(account_url: str, credential: str | Dict[str, str] | AzureNamedKeyCredential | AzureSasCredential | TokenCredential | None = None, **kwargs: Any)

We can see account_url is required but credential is optional. The reason why credentail is optional because the account_url can itself contain the credential (example SAS). Since you are filling the shared access key field, it expects the account_url field to be filled as well of the form https://{account_name}.blob.core.windows.net and since this field is blank in your case hence the error. The Blob Storage Login is completly ignored in this case.

The first case works just fine because URL is being built here using Blob Storage Login

Will create a PR to handle this case. But I hope it clears the doubt here.