Azure Blob Archival

Please refer to these steps to setup Azure application to use audit trailing.

App Registration and Role Assignments¶

Sign into the Azure portal.
Search for App registrations.
Click on the + New registration button to create a new application.
Provide a name for your application, and choose the appropriate account type (e.g., Accounts in this organizational directory only or Accounts in any organizational directory).
In the Redirect URI section, you can leave it blank for now if you do not have a specific redirect URI to configure.
Click the Register button to create the application.

Under the API permissions section, click on the + Add a permission button.
Search for User impersonation permission under Azure Storage section.
Select and add the permission to app.

Create a new storage account or use an existing account. The storage account should have these configurations.

Go to your Azure Blob Storage account in the Azure portal.
In the left-hand menu, select Access control (IAM).
Click the + Add a role assignment button to assign a role to your Azure AD application.
Choose the appropriate role that grants access to Azure Blob Storage, such as Storage Blob Data Contributor and Reader.
In the Assign access to field, select Azure AD user, group, or application.
In the Select field, search for, and select the Azure AD application you registered in Step 1 and save the role.

After registering the application, navigate to the Certificates & secrets section in the left-hand menu.
Under the Certificates section, click on the + Upload Certificate button.
Upload the certificate file provided on connection page, provide a description, and click the Add button.