Add storage_account parameter to Azure Blob Storage backend (#2016)

* Add storage_account parameter to Azure Blob Storage backend

to use cli auth

Related to pulumi/pulumi#10900
Related to google/go-cloud#3159

Co-authored-by: Aaron Friel <mayreply@aaronfriel.com>

themes/default/content/docs/intro/concepts/state.md

@@ -197,6 +197,19 @@ $ pulumi login azblob://<container-path>
 
 To tell Pulumi what Azure storage account to use, set the `AZURE_STORAGE_ACCOUNT` environment variable. Also, set either `AZURE_STORAGE_KEY` or `AZURE_STORAGE_SAS_TOKEN` to authorize access. For additional configuration options, see [Azure Setup]({{< relref "/registry/packages/azure/installation-configuration" >}}). If you're new to Azure Blob Storage, see [the Azure documentation](https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-cli).
 
+{{% notes type="info"%}}
+As of Pulumi CLI v3.41.1, instead of the environment variables above, Azure CLI authentication may be used by specifying the storage account in the URL like so after using `az login`:
+
+```sh
+$ pulumi login azblob://<container-path>?storage_account=account_name
+```
+
+{{% /notes %}}
+
+{{% notes type="info"%}}
+The Azure account must have the [Storage Blob Data Contributor role](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#storage-blob-data-contributor) or an equivalent role with permissions to read, write, and delete blobs.
+{{% /notes %}}
+
 ##### Logging Into the Google Cloud Storage Backend
 
 To use the [Google Cloud Storage](https://cloud.google.com/storage/) backend pass the `gs://<bucket-path>` as your `<backend-url>`: