add access key option for azure_rm_storageblob

lib/ansible/module_utils/azure_rm_common.py

@@ -537,25 +537,29 @@ def check_provisioning_state(self, azure_object, requested_state='present'):
                 self.fail("Error {0} has a provisioning state of {1}. Expecting state to be {2}.".format(
                     azure_object.name, azure_object.provisioning_state, AZURE_SUCCESS_STATE))
 
-    def get_blob_client(self, resource_group_name, storage_account_name, storage_blob_type='block'):
+    def get_blob_client(self, resource_group_name, storage_account_name, storage_blob_type='block', provided_access_key=None):
         keys = dict()
         try:
             # Get keys from the storage account
             self.log('Getting keys')
             account_keys = self.storage_client.storage_accounts.list_keys(resource_group_name, storage_account_name)
+            account_key = account_keys.keys[0].value
         except Exception as exc:
-            self.fail("Error getting keys for account {0} - {1}".format(storage_account_name, str(exc)))
+            if provided_access_key is not None:
+                account_key = provided_access_key
+            else:
+                self.fail("Error getting keys for account {0} - {1}".format(storage_account_name, str(exc)))
 
         try:
             self.log('Create blob service')
             if storage_blob_type == 'page':
                 return PageBlobService(endpoint_suffix=self._cloud_environment.suffixes.storage_endpoint,
                                        account_name=storage_account_name,
-                                       account_key=account_keys.keys[0].value)
+                                       account_key=account_key)
             elif storage_blob_type == 'block':
                 return BlockBlobService(endpoint_suffix=self._cloud_environment.suffixes.storage_endpoint,
                                         account_name=storage_account_name,
-                                        account_key=account_keys.keys[0].value)
+                                        account_key=account_key)
             else:
                 raise Exception("Invalid storage blob type defined.")
         except Exception as exc:

lib/ansible/modules/cloud/azure/azure_rm_storageblob.py

@@ -111,6 +111,11 @@
         choices:
             - container
             - blob
+    access_key:
+        description:
+            - Use access key to authenticate your applications.
+            - Required when making requests to the storage account in other subscription
+        version_added: "2.9"
 
 extends_documentation_fragment:
     - azure
@@ -213,6 +218,7 @@ def __init__(self):
             content_disposition=dict(type='str'),
             cache_control=dict(type='str'),
             content_md5=dict(type='str'),
+            access_key=dict(type='str')
         )
 
         mutually_exclusive = [('src', 'dest')]
@@ -232,6 +238,7 @@ def __init__(self):
         self.state = None
         self.tags = None
         self.public_access = None
+        self.access_key = None
         self.results = dict(
             changed=False,
             actions=[],
@@ -253,7 +260,7 @@ def exec_module(self, **kwargs):
 
         # add file path validation
 
-        self.blob_client = self.get_blob_client(self.resource_group, self.storage_account_name, self.blob_type)
+        self.blob_client = self.get_blob_client(self.resource_group, self.storage_account_name, self.blob_type, self.access_key)
         self.container_obj = self.get_container()
 
         if self.blob is not None: