The Azure Files Container Storage Interface (CSI) driver in Azure
Kubernetes Service (AKS) now supports workload identity for pod-level
authentication to SMB file shares. Previously, managed identity support in AKS enabled
workloads to mount Azure Files without using storage account keys. With workload
identity support in AKS, applications can leverage pod-level least-privilege
access to Azure Files. This provides granular security control for regulated
industries operating under stringent compliance requirements. With workload
identity, you can scope application pod access to exactly the data it needs
rather than granting access at the node level. This feature is available in all
Azure regions that support Azure Files and AKS.