Azure Storage Blob Rust

作者 microsoft354361d83247MIT收錄於 2026年10月8日更新於 2026年10月8日

Azure Blob Storage library for Rust. Upload, download, and manage blobs and containers. Triggers: "blob storage rust", "BlobClient rust", "upload blob rust", "download blob rust", "storage container rust", "BlobServiceClient rust".

精選僅含說明Software Development DevOps & Cloud

AI 產生的概覽

指導 Rust 開發者使用官方 azure_storage_blob crate 上傳、下載與管理 Azure Blob 和容器。

功能: 這個技能為官方 azure_storage_blob Rust crate 提供參考說明與程式碼範例。內容涵蓋用戶端建構、使用 DeveloperToolsCredential 進行驗證、上傳、下載與刪除 Blob、建立容器與列出 Blob、以 StorageError 處理錯誤，以及 RBAC 角色指引。它也列出常見陷阱與最佳實務，例如使用 cargo add 以及執行 cargo clippy。
適用情境: 在撰寫讀取或寫入 Azure Blob Storage 的 Rust 程式碼時使用，例如上傳或下載 Blob、建立或列出容器，或設定以 RBAC 為基礎的驗證。排查 Rust Azure SDK 的認證或分頁問題時也適用。
執行需求: 需要含 Cargo 的 Rust 工具鏈，以及 azure_storage_blob、azure_identity、azure_core、tokio 和 futures 這些 crate。需要 Azure 儲存體帳戶、對儲存體端點的網路存取，以及適當的 Entra ID 認證或 RBAC 角色。不附帶指令碼，只有說明與程式碼範例。

Azure Blob Storage library for Rust

Client library for Azure Blob Storage — upload, download, and manage blobs and containers.

Use this skill when:

An app needs to upload or download blobs from Azure Storage in Rust
You need to create or manage blob containers
You need to list blobs with pagination
You need RBAC-based auth for blob operations

IMPORTANT: Only use the official azure_storage_blob crate published by the azure-sdk crates.io user. Do NOT use the unofficial azure_storage, azure_storage_blobs, or azure_sdk_for_rust community crates. Official crates use underscores in names and none have version 0.21.0.

Installation

If your code uses azure_core types directly (for example, azure_core::http::Url or azure_core::http::RequestContent), add azure_core to Cargo.toml. If you only use azure_storage_blob re-exports, direct azure_core dependency is optional.

Environment Variables

bash

AZURE_STORAGE_ACCOUNT=<account-name>                         # Preferred when the caller gives an account nameAZURE_STORAGE_ENDPOINT=https://<account>.blob.core.windows.net/ # Optional alternative when the caller gives a full endpoint

AZURE_STORAGE_ACCOUNT=<account-name>                         # Preferred when the caller gives an account nameAZURE_STORAGE_ENDPOINT=https://<account>.blob.core.windows.net/ # Optional alternative when the caller gives a full endpoint

When both are available, prefer constructing the endpoint from AZURE_STORAGE_ACCOUNT so the code matches common evaluation prompts.

Authentication

Rust Azure SDK code must not use DefaultAzureCredential. The Rust identity crate does not provide that type.

rust

// Correct for local developmentuse azure_identity::DeveloperToolsCredential;
let credential = DeveloperToolsCredential::new(None)?;

// Correct for local developmentuse azure_identity::DeveloperToolsCredential;
let credential = DeveloperToolsCredential::new(None)?;

rust

// Incorrect in Rust: this type does not exist in azure_identityuse azure_identity::DefaultAzureCredential;

// Incorrect in Rust: this type does not exist in azure_identityuse azure_identity::DefaultAzureCredential;

rust

use azure_core::http::Url;use azure_identity::DeveloperToolsCredential;use azure_storage_blob::BlobServiceClient;
#[tokio::main]async fn main() -> Result<(), Box<dyn std::error::Error>> {    // Local dev: DeveloperToolsCredential. Production: use ManagedIdentityCredential.    let credential = DeveloperToolsCredential::new(None)?;    let service_url = Url::parse("https://<storage_account_name>.blob.core.windows.net/")?;    let service_client = BlobServiceClient::new(        service_url,        Some(credential),        None,    )?;
    // Derive container and blob clients by name.    let container_client = service_client.blob_container_client("<container_name>");    let blob_client = container_client.blob_client("<blob_name>");    Ok(())}

use azure_core::http::Url;use azure_identity::DeveloperToolsCredential;use azure_storage_blob::BlobServiceClient;
#[tokio::main]async fn main() -> Result<(), Box<dyn std::error::Error>> {    // Local dev: DeveloperToolsCredential. Production: use ManagedIdentityCredential.    let credential = DeveloperToolsCredential::new(None)?;    let service_url = Url::parse("https://<storage_account_name>.blob.core.windows.net/")?;    let service_client = BlobServiceClient::new(        service_url,        Some(credential),        None,    )?;
    // Derive container and blob clients by name.    let container_client = service_client.blob_container_client("<container_name>");    let blob_client = container_client.blob_client("<blob_name>");    Ok(())}

Client Types

Core Workflow

Upload Blob

rust

use azure_core::http::{RequestContent, Url};use azure_identity::DeveloperToolsCredential;use azure_storage_blob::BlobServiceClient;
#[tokio::main]async fn main() -> Result<(), Box<dyn std::error::Error>> {    // Local dev: DeveloperToolsCredential. Production: use ManagedIdentityCredential.    let credential = DeveloperToolsCredential::new(None)?;    let service_url = Url::parse("https://<storage_account_name>.blob.core.windows.net/")?;    let service_client = BlobServiceClient::new(service_url, Some(credential), None)?;    let blob_client = service_client.blob_client("<container_name>", "<blob_name>");
    let data = b"hello world";    blob_client.upload(RequestContent::from(data.to_vec()), None).await?;    Ok(())}

use azure_core::http::{RequestContent, Url};use azure_identity::DeveloperToolsCredential;use azure_storage_blob::BlobServiceClient;
#[tokio::main]async fn main() -> Result<(), Box<dyn std::error::Error>> {    // Local dev: DeveloperToolsCredential. Production: use ManagedIdentityCredential.    let credential = DeveloperToolsCredential::new(None)?;    let service_url = Url::parse("https://<storage_account_name>.blob.core.windows.net/")?;    let service_client = BlobServiceClient::new(service_url, Some(credential), None)?;    let blob_client = service_client.blob_client("<container_name>", "<blob_name>");
    let data = b"hello world";    blob_client.upload(RequestContent::from(data.to_vec()), None).await?;    Ok(())}

Download Blob / Get Properties

rust

// Get blob propertieslet props = blob_client.get_properties(None).await?;
// Download blob contentlet response = blob_client.download(None).await?;let content = String::from_utf8(response.body.collect().await?.into())?;

// Get blob propertieslet props = blob_client.get_properties(None).await?;
// Download blob contentlet response = blob_client.download(None).await?;let content = String::from_utf8(response.body.collect().await?.into())?;

Delete Blob

Container Operations

rust

use azure_core::http::Url;use azure_identity::DeveloperToolsCredential;use azure_storage_blob::BlobServiceClient;use futures::TryStreamExt as _;
let credential = DeveloperToolsCredential::new(None)?;let service_url = Url::parse("https://<storage_account_name>.blob.core.windows.net/")?;let service_client = BlobServiceClient::new(service_url, Some(credential), None)?;let container_client = service_client.blob_container_client("<container_name>");
// Create containercontainer_client.create(None).await?;
// List blobs (the pager yields BlobItem values directly for this client pattern)let mut pager = container_client.list_blobs(None)?;while let Some(blob) = pager.try_next().await? {    let name = blob.name.as_deref().unwrap_or("<unnamed>");    let size = blob        .properties        .as_ref()        .and_then(|properties| properties.content_length);
    match size {        Some(size) => println!("Blob: {name} ({size} bytes)"),        None => println!("Blob: {name}"),    }}

use azure_core::http::Url;use azure_identity::DeveloperToolsCredential;use azure_storage_blob::BlobServiceClient;use futures::TryStreamExt as _;
let credential = DeveloperToolsCredential::new(None)?;let service_url = Url::parse("https://<storage_account_name>.blob.core.windows.net/")?;let service_client = BlobServiceClient::new(service_url, Some(credential), None)?;let container_client = service_client.blob_container_client("<container_name>");
// Create containercontainer_client.create(None).await?;
// List blobs (the pager yields BlobItem values directly for this client pattern)let mut pager = container_client.list_blobs(None)?;while let Some(blob) = pager.try_next().await? {    let name = blob.name.as_deref().unwrap_or("<unnamed>");    let size = blob        .properties        .as_ref()        .and_then(|properties| properties.content_length);
    match size {        Some(size) => println!("Blob: {name} ({size} bytes)"),        None => println!("Blob: {name}"),    }}

For azure_storage_blob 1.x, do not assume you need a nested page loop like for item in &page.blob_items. In this usage pattern, try_next() already yields the blob item you want to print.

Error Handling

Use StorageError for programmatic access to storage-specific error codes:

rust

use azure_core::error::ErrorKind;use azure_storage_blob::StorageError;use azure_storage_blob::models::StorageErrorCode;
let result = blob_client.download(None).await;
match result {    Ok(response) => {        let content: Vec<u8> = response.body.collect().await?.into();        println!("Downloaded {} bytes", content.len());    }    Err(error) => {        if matches!(error.kind(), ErrorKind::HttpResponse { .. }) {            // Convert to StorageError for programmatic access            let storage_error: StorageError = error.try_into()?;            println!("HTTP Status: {}", storage_error.status_code);
            if let Some(error_code) = &storage_error.error_code {                match error_code {                    StorageErrorCode::BlobNotFound => {                        println!("The blob does not exist.");                    }                    StorageErrorCode::ContainerNotFound => {                        println!("The container does not exist.");                    }                    StorageErrorCode::AuthorizationFailure => {                        println!("Authorization failed. Check RBAC roles.");                    }                    _ => println!("Storage error: {error_code}"),                }            }
            if let Some(request_id) = &storage_error.request_id {                println!("Request ID (for Azure support): {request_id}");            }        } else {            println!("Non-HTTP error: {:?}", error);        }    }}

use azure_core::error::ErrorKind;use azure_storage_blob::StorageError;use azure_storage_blob::models::StorageErrorCode;
let result = blob_client.download(None).await;
match result {    Ok(response) => {        let content: Vec<u8> = response.body.collect().await?.into();        println!("Downloaded {} bytes", content.len());    }    Err(error) => {        if matches!(error.kind(), ErrorKind::HttpResponse { .. }) {            // Convert to StorageError for programmatic access            let storage_error: StorageError = error.try_into()?;            println!("HTTP Status: {}", storage_error.status_code);
            if let Some(error_code) = &storage_error.error_code {                match error_code {                    StorageErrorCode::BlobNotFound => {                        println!("The blob does not exist.");                    }                    StorageErrorCode::ContainerNotFound => {                        println!("The container does not exist.");                    }                    StorageErrorCode::AuthorizationFailure => {                        println!("Authorization failed. Check RBAC roles.");                    }                    _ => println!("Storage error: {error_code}"),                }            }
            if let Some(request_id) = &storage_error.request_id {                println!("Request ID (for Azure support): {request_id}");            }        } else {            println!("Non-HTTP error: {:?}", error);        }    }}

Note: StorageError::try_into requires an owned error object — it will not compile if handed a reference to an error.

RBAC Roles

For Entra ID auth, assign one of these roles to the identity:

Best Practices

Use cargo add to manage dependencies, never edit Cargo.toml directly. Add and remove Rust SDK dependencies with cargo commands instead of manual manifest edits.
Add azure_core only when importing azure_core types directly. If your code imports azure_core::http::Url, azure_core::http::RequestContent, or azure_core::error::ErrorKind, include azure_core; otherwise a direct dependency is optional.
Use DeveloperToolsCredential for local dev, ManagedIdentityCredential for production — Rust does not provide a single DefaultAzureCredential type
Never hardcode credentials — use environment variables or managed identity
Use RequestContent::from() to wrap data for blob uploads — ensures proper content handling by the SDK
Assign RBAC roles — ensure "Storage Blob Data Contributor" for write access
Reuse clients — clients are thread-safe; create once, share across tasks
Prefer BlobServiceClient as the entry point and derive container/blob clients from it
Treat many storage model fields as optional. blob.name is an Option<String> and content length is accessed via blob.properties.as_ref().and_then(|p| p.content_length).
Run cargo clippy -- -D warnings before considering the task complete when the prompt or CI expects strict lint compliance; fix style lints such as collapsible if blocks, not just compiler errors.
Prefer crate README/examples over generated internal type names when validating public API shapes such as pagination results
Future-proof #[non_exhaustive] SDK models — when constructing SDK model/options structs, end the initializer with ..Default::default() (add #[allow(clippy::needless_update)]) and use a _ wildcard arm when matching SDK enums, so new service-added fields/variants don't break your build

Common Rust Blob Pitfalls

Do not import azure_identity::DefaultAzureCredential; use DeveloperToolsCredential or another real Rust credential type.
Do not assume generated internal model names describe the public pager item type; follow the documented list_blobs example for this crate.
Do not print blob.name with {} directly; unwrap or provide a fallback because it is optional.
Do not stop after cargo build passes when the task also requires cargo clippy -- -D warnings.

Reference Links

Resource	Link
API Reference	https://docs.rs/crate/azure_storage_blob/latest
crates.io	https://crates.io/crates/azure_storage_blob
Source Code	https://github.com/Azure/azure-sdk-for-rust/tree/main/sdk/storage/azure_storage_blob

來源與署名

來源：microsoft/skills位於.github/plugins/azure-sdk-rust/skills/azure-storage-blob-rust提交354361d

授權條款： MIT

內容歸原作者所有。SourceWeft 從公開儲存庫中收錄這些內容。

檢舉或申請下架

Client	Purpose
`BlobServiceClient`	Account-level operations, list containers
`BlobContainerClient`	Container operations, list blobs
`BlobClient`	Individual blob operations

Role	Access
`Storage Blob Data Reader`	Read-only
`Storage Blob Data Contributor`	Read/write
`Storage Blob Data Owner`	Full access including RBAC

Azure Storage Blob Rust

Azure Blob Storage library for Rust

Installation

Environment Variables

Authentication

Client Types

Core Workflow

Upload Blob

Download Blob / Get Properties

Delete Blob

Container Operations

Error Handling

RBAC Roles

Best Practices

Common Rust Blob Pitfalls

Reference Links

來源與署名

更多來自 microsoft/skills 的技能

Customize

Discover Azure Skills

Azure Resource Visualizer

Azure Resource Lookup

Azure Messaging

Azure Kusto

更多Software Development技能

Playground

M5 Onboard

Cardputer Buddy

Testing Strategy

Tech Debt

System Design