Azure数据块通过服务主体访问Azure数据湖存储Gen2

Question

那么，如果仍然需要存储帐户访问密钥，服务帐户的目的是什么
还有一个主要问题-是否可以完全删除存储帐户访问密钥并仅使用服务主体？

Answer 1

这是一个文档错误，目前我正在立即修复。

应该是dbutils.secrets.get（scope="

Python：通过传递直接值来装载 Azure 数据湖存储 Gen2 文件系统

configs = {"fs.azure.account.auth.type": "OAuth",
       "fs.azure.account.oauth.provider.type": "org.apache.hadoop.fs.azurebfs.oauth2.ClientCredsTokenProvider",
       "fs.azure.account.oauth2.client.id": "0xxxxxxxxxxxxxxxxxxxxxxxxxxf", #Enter <appId> = Application ID
       "fs.azure.account.oauth2.client.secret": "Arxxxxxxxxxxxxxxxxxxxxy7].vX7bMt]*", #Enter <password> = Client Secret created in AAD
       "fs.azure.account.oauth2.client.endpoint": "https://login.microsoftonline.com/72fxxxxxxxxxxxxxxxxxxxxxxxxb47/oauth2/token", #Enter <tenant> = Tenant ID
       "fs.azure.createRemoteFileSystemDuringInitialization": "true"}

dbutils.fs.mount(
source = "abfss://[e-mail]/flightdata", #Enter <container-name> = filesystem name <storage-account-name> = storage name
mount_point = "/mnt/flightdata",
extra_configs = configs)

Python：通过使用dbutils秘密在秘密范围内作为秘密传递来挂载Azure Data Lake Storage Gen2文件系统。

configs = {"fs.azure.account.auth.type": "OAuth",
           "fs.azure.account.oauth.provider.type": "org.apache.hadoop.fs.azurebfs.oauth2.ClientCredsTokenProvider",
           "fs.azure.account.oauth2.client.id": "06xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx0ef",
           "fs.azure.account.oauth2.client.secret": dbutils.secrets.get(scope = "chepra", key = "service-credential"),
           "fs.azure.account.oauth2.client.endpoint": "https://login.microsoftonline.com/72xxxxxxxxxxxxxxxxxxxx011db47/oauth2/token"}

dbutils.fs.mount(
source = "abfss://[e-mail]/flightdata", 
mount_point = "/mnt/flightdata",
extra_configs = configs)

希望这有所帮助。如果您有任何疑问，请务必告诉我们。