az storage account keys

Manage storage account keys.

Commands

az storage account keys list

List the access keys or Kerberos keys (if active directory enabled) for a storage account.

az storage account keys renew

Regenerate one of the access keys or Kerberos keys (if active directory enabled) for a storage account.

az storage account keys list

List the access keys or Kerberos keys (if active directory enabled) for a storage account.

az storage account keys list --account-name
                             [--resource-group]

Examples

List the access keys for a storage account.

az storage account keys list -g MyResourceGroup -n MyStorageAccount

Required Parameters

--account-name -n

The storage account name.

Optional Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

az storage account keys renew

Regenerate one of the access keys or Kerberos keys (if active directory enabled) for a storage account.

Kerberos key is generated per storage account for Azure Files identity based authentication either with Azure Active Directory Domain Service (Azure AD DS) or Active Directory Domain Service (AD DS). It is used as the password of the identity registered in the domain service that represents the storage account. Kerberos key does not provide access permission to perform any control or data plane read or write operations against the storage account.

az storage account keys renew --account-name
                              --key {primary, secondary}
                              [--resource-group]

Examples

Regenerate one of the access keys for a storage account.

az storage account keys renew -g MyResourceGroup -n MyStorageAccount --key primary

Regenerate one of the Kerberos keys for a storage account.

az storage account keys renew -g MyResourceGroup -n MyStorageAccount --key secondary

Required Parameters

--account-name -n

The storage account name.

--key

The key to regenerate.

accepted values: primary, secondary

Optional Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.