Adding Azure Storage by using Visual Studio Connected Services

1. Open your project in Visual Studio.

2. In Solution Explorer, right-click the Connected Services node, and, from the context menu, select Add Connected Service.

   

3. In the Connected Services tab, select the + icon for Service Dependencies.

   

4. In the Add Dependency page, select Azure Storage.

   

   If you aren't signed in already, sign in to your Azure account. If you don't have an Azure account, you can sign up for a free trial.

5. In the Configure Azure Storage screen, select an existing storage account, and select Next.

   If you need to create a storage account, go to the next step. Otherwise, skip to step 6.

   

6. To create a storage account:

   1. Select Create a storage account at the bottom of the dialog.

   2. Fill out the Azure Storage: Create new dialog, and select Create.

      

   3. When the Azure Storage dialog is displayed, the new storage account appears in the list. Select the new storage account in the list, and select Next.

7. Enter a connection string name, and choose whether you want the connection string stored in a local secrets file, or in Azure Key Vault.

   

8. The Summary of changes screen shows all the modifications that will be made to your project if you complete the process. If the changes look OK, choose Finish.

   

9. The storage connected service appears under the Connected Services node of your project.

1. Open your project in Visual Studio.

2. Press Ctrl+Q (or use the Search button in the Visual Studio IDE to the right of the main menu bar).

3. In Feature search, enter Azure Storage, and choose Azure Storage - Project > Connected Services > Add > Azure Storage.

   

4. In the Connect to dependency page, select Azure Storage, and then select Next.

   

   If you aren't signed in already, sign in to your Azure account. If you don't have an Azure account, you can sign up for a free trial.

5. In the Connect to Azure Storage screen, select an existing storage account, and select Next.

   If you need to create a storage account, go to the next step. Otherwise, skip to the following step.

   

6. To create a storage account:

   1. Select Create new by the green plus sign.

   2. Fill out the Azure Storage: Create new dialog, and select Create.

      

   3. When the Azure Storage dialog is displayed, the new storage account appears in the list. Select the new storage account in the list, and select Next.

7. Enter a connection string setting name. The setting name references the name of the connection string setting as it appears in the secrets.json file, or in Azure Key Vault.

   

8. Choose whether you want the connection string stored in a local secrets file, in Azure Key Vault, or not stored anywhere.

   

   Caution

   If you're using a version of Visual Studio earlier than Visual Studio 17.12, and you choose to use a secrets.json file, you must take security precautions, since the connection string in the local secrets.json file could be exposed. If you're using Visual Studio 2022 version 17.12 or later, this procedure produces more secure result, because it yields a connection setting value, instead of a connection string with authentication credentials.

9. The Summary of changes screen shows all the modifications that will be made to your project if you complete the process. If the changes look OK, choose Finish.

   

10. The storage connected service appears under the Connected Services node of your project.

Understand authentication

After you run the previous procedure, your app is set up to use authentication to access the storage account. The connection information for this authentication are stored locally, if you chose the secrets.json method, or in your Azure Key Vault.

If you used the secrets.json file, open the file by using the three dots next to Secrets.json on the Connected Services tab to open a menu, and choose Manage user secrets. With Visual Studio 2022 version 17.12 and later, this file contains settings that reference a Uri to obtain the secure connection string, rather than the connection string itself.

{
  "StorageConnection:blobServiceUri": "https://webapplication16storagex.blob.core.windows.net/",
  "StorageConnection:queueServiceUri": "https://webapplication16storagex.queue.core.windows.net/",
  "StorageConnection:tableServiceUri": "https://webapplication16storagex.table.core.windows.net/"
}

With these settings in Visual Studio 17.12 and later, authentication is automatic and flexible. When you run or debug locally from Visual Studio, your Azure credentials saved by Visual Studio are used to access the Azure storage account. If you launch your app from the command-line, you first need to sign in using the Azure CLI, and those credentials are automatically detected and used. But when your app is deployed to Azure and runs in Azure, it uses managed identity, without any code changes. The authentication works in all hosting environments because the Azure Identity APIs check for all chained credentials in sequence and use them when they're found. See DefaultAzureCredential.