title: Download file from Azure blob storage onto Azure Linux VM
body: <p>I'm coming from an AWS background and trying to get something relatively simple to work in Azure, but currently having a rough time parsing through all the documentation and Microsoft-specific jargon to find what I'm looking for.</p>
  <p>I'm trying to download a single file I have in Azure blob storage (which from what I can gather is the closest equivalent to storing an object in S3) onto a Linux VM with the CLI. From what I've read. the command I need to run is:</p>
  <pre><code>az storage copy -s https://myaccount.blob.core.windows.net/mycontainer/myfile -d .
  </code></pre>
  <p>A couple of questions for automation purposes, however. Is there an equivalent to IAM roles for VMs in Azure? That way, I won't have to keep credential file(s) on the VM itself. But if not, what type of credentials should I generate for best practice? I ask, because it seems there's about a half-dozen different choices in Azure, and all I'm really looking for is something basic. Just essentially need what amounts to a &quot;programmatic-access only&quot; user in AWS. That way I can also lock down its permissions to a very specific set of resources and/or actions.</p>
  <p>As always, thanks in advance!</p>