Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Azure blob client fails with authz error while same operation is allowed via CLI

See original GitHub issue

Package Name: azure-storage-blob
Package Version: 12.5.0
Operating System: MacOS
Python Version: 3.8

Describe the bug This command: az storage blob list --container-name mycontainername --account-name myaccount works and returns list of blobs in python: ContainerClient(account_url="myaccount.blob.core.windows.net", container_name="mycontainername", credential=AzureCliCredential()).list_blobs()

Throws:

HttpResponseError: This request is not authorized to perform this operation using this permission.
RequestId:4d936591-701e-0031-078a-8c01ed000000
Time:2020-09-17T00:34:09.6826796Z
ErrorCode:AuthorizationPermissionMismatch
Error:None

Expected behavior Either python returning correct response or useful error message to pinpoint what’s wrong.

Issue Analytics

State:
Created 3 years ago
Comments:10 (2 by maintainers)

Top GitHub Comments

1reaction

inc0commented, Sep 18, 2020

right, if you ask people to pull that key themselves, that requires this key to be stored in some secure manner, and that’s a lot to ask. I’d suggest giving a way in python sdk to pull that key on runtime using existing auth method. It already is available over API via /subscriptions/<my sub id>/resourceGroups/<res group>/providers/Microsoft.Storage/storageAccounts/<my account>/listKeys call

1reaction

inc0commented, Sep 18, 2020

After looking here we’ve added missing permission and it worked. I think CLI uses access keys under the hood. It may be good idea to document how to pull access keys and use them in python sdk too. I’ll close this issue for now