Does DFM_ALTERNATIVE_CONNECTION_STRING_* Support Identity connection ?

[MasterKuat]

Hi,

I try to use a standalone DFM installation to monitor 4 differents functions.
Set DFM_ALTERNATIVE_CONNECTION_STRING_* for all 4 works well if I set the full connection string with key and so on but is there a way to use DFM identity to connect other storage account ?

Thanks

[scale-tone]

Hi @MasterKuat ,
No, identity-based connections are not currently supported for alternative storages (DFM_ALTERNATIVE_CONNECTION_STRING_*).

I suggest you either store those connection strings in Key Vault (and use the @Microsoft.KeyVault() references), or deploy separate DfMon instances for each storage, or just use DfMon in form of VsCode (or GitHub Codespaces) extension.

[MasterKuat]

Hi @scale-tone ,

Thanks for your answer.
My initial guess was good.

For operationnal purposes, I wish to use only 1 instance of (your great) DfMon, could it be added ?
As Managed Identity seems to be The Future, sounds to me like a good idea.

[bhugot]

Hi @MasterKuat from my point of view but I could be wrong support for managed identity is related to the migration to Azure.Storage for durable task. There is a PR for this Azure/durabletask#763 and it should solve part of the problem but @scale-tone, I think the same move should be done here for all usage of Microsoft.WindowsAzure.Storage

[MasterKuat]

Hi @bhugot,
I'm not sure for the PR as DurableFunction (which use DurableTask) already support managed identity for storage account.

[bhugot]

Ok my bad