Data Delivery Using Azure

1. Log into your Azure storage account (or create one).
2. Go to Settings > Configuration and disable Blob anonymous access.

3. Request PDL's delivery server IP address from [email protected].
4. Go to Security + networking > Networking > Firewall and add PDL's IP address to the allowed IP ranges. Please reach out to your CSM to obtain PDL's IP address to add the the allowed IP ranges.

5. Create a container in the storage account.
6. Create an access policy for the container with Read, Write, Delete, and List permissions.
7. Generate a SAS token and URL for your container.
   1. Let the SAS token and URL live for up to 1 year to facilitate quarterly or monthly deliveries.
   2. Securely share the SAS token and URL with PDL using 1password share, a limited shared Google drive with the blob token in it, or another method of secure sharing where only those who need to know (you and the PDL security team) can view it.

Delivery Completion Files

PDL creates a top-level COMPLETED file when your Azure delivery is fully finished. Use this file as the reliable signal that all files and subfolders are ready to ingest.

For more details on completion signals and why _SUCCESS is not a reliable automation trigger, see Data License Ingestion.