Security features of ADLS Gen2
ADLS Gen2 offers almost the same security model as Azure Storage. In fact, the only difference is the access control list (ACL) feature, which can be used to define access to directories and files. In this section, we will cover the security features available and describe them in detail so that you can use them right away.
Authentication and authorization
To authenticate who or what can access data stored, ADLS Gen2 uses Azure AD to know what the current entity accessing data is. To authorize it, it leverages both role-based access control (RBAC) to secure the resource itself, and a POSIX ACL to secure data.
It is important to understand the distinction between these two terms, so let’s have a closer look here:
- Authentication: This determines who or what tries to access a particular resource.
- Authorization: This secures a resource by limiting access to it to those who...
