Today, we are announcing Azure Bastion now supports managed
identities for graphical session recording.
Azure Bastion graphical session recording now supports write
access to storage accounts using managed identities. With this update, users
have the option to configure managed identities during session recording setup
and specify the storage account container for storing VM recordings. Once the
managed identity is authenticated to WRITE recordings to the storage container,
Azure Bastion will authenticate without requiring a SAS token.
- Stronger
security posture: Removes shared, time‑bound SAS URLs in favor of
identity‑based authorization tied to the Bastion resource.
- Reduced
operational overhead: Eliminates token creation, rotation, and
expiry management, making session recording easier to operate at scale.
Learn
more.