Enabling SFTP for File Access to Azure Blob Storage

The OneTrust SFTP connector supports file transfers for Azure Blob Storage. This requires you to enable the given storage account with SFTP access, authorize access for local users, and supply the container needed for transfers.

For an additional overview, see Azure's guide SFTP support for Azure Blob Storage.

To create and configure the storage account

  1. Create a storage account in the Azure Portal. You will need to provide the following in the Basics tab.
    Note:

    For existing storage accounts, navigate to its overview screen and select Settings > SFTP > Enable SFTP. Then proceed to step 7.

    • Subscription

    • Resource group

    • Storage account name

    • Region



    Note:

    For additional help, see Azure's guide Create an Azure Storage Account.

  2. In the Advanced tab, enable the Hierarchical Namespace and Enable SFPT settings.


  3. Optional: LRS can be opted for cost optimization for testing and geo-redundancy suggested for customers to access storage on a wider range.
  4. In the Network tab, select Enable public access with selected virtual networks and IP addresses for network access.


  5. In the Encryption tab, choose Microsoft-managed keys as the encryption type and Blobs and files only for customer-managed key support. The container needs to be available to transfer files.


  6. Finalize any additional settings and preferences for this storage account prior to creation.
  7. With the storage account created, go to the SFTP menu to create a local user that authenticates with an Azure-generated password or SSH key
    Important:

    The storage account must have an identity associated with the password or key pair, which is known as a local user.



    Note:

    For additional help, see Azure's guide Authorize access to Azure Blob Storage for an SFPT client.

  8. In the Permissions tab, select the container that you want to make available to this local user. Then, provide read/write permissions you want this local user to perform.


  9. Test connection from a local host. Attempt to access the landing directory and files uploaded from Azure Portal.

    • Use the command, - sftp<sftpconnection_string>, to test the access using post 22 from local host.

    • When prompted, use the password to access the landing directory, files, and permissions.

    Note:

    For additional help, see Azure's guide Connect to Azure Blob Storage from an SFTP client.

  10. Use the credential vault to ingest the JSON for the SFTP connector. For additional guidance on JSON credential setup, see Creating Data Source Credentials.
    Note:

    The host name must contain the SFTP name from Azure Portal.

    JSON 
    {  
    "host": "<sfpt-host-name>",
    "password": "<azure-generated-password-for-localhost",
    "port": "22",
    "username": "<sfpt-localhost-username>"
}