Generally Available: Workload identity support for Azure Files CSI driver (SMB) in Azure

The Azure Files Container Storage Interface (CSI) driver in Azure Kubernetes Service (AKS) now supports workload identity for pod-level authentication to SMB file shares. Previously, managed identity support in AKS enabled workloads to mount Azure Files without using storage account keys. With workload identity support in AKS, applications can leverage pod-level least-privilege access to Azure Files. This provides granular security control for regulated industries operating under stringent compliance requirements. With workload identity, you can scope application pod access to exactly the data it needs rather than granting access at the node level. This feature is available in all Azure regions that support Azure Files and AKS.

Learn More:

• Create and manage persistent volumes (PVs) with Azure Files in Azure Kubernetes Service (AKS) - Azure Kubernetes Service
• Workload identities - Microsoft Entra Workload ID