Which Azure storage solution provides native support for POSIX-compliant access control lists (ACLs)?

Azure Data Lake Storage Gen2 is specifically designed for big data analytics and provides a hierarchical namespace on top of Azure Blob Storage. This allows it to function as a high-performance file system. A core feature of this design is its native support for POSIX-compliant access control lists (ACLs). This enables granular, file- and folder-level permissions for specific users and groups, which is a critical requirement for big data processing frameworks like Hadoop and Spark that rely on the HDFS permission model.

A. Azure Queue storage is a service for storing and retrieving messages. It does not have a file system structure and therefore does not use POSIX ACLs.

C. Azure Table storage is a NoSQL key-value data store. Its access control is not based on a file system model or POSIX ACLs.

D. Azure Files provides file shares accessible via SMB and NFS protocols. While NFS shares support POSIX-like permissions, Azure Data Lake Storage is the service where native, POSIX-compliant ACLs are a defining feature for big data workloads.

1. Microsoft Learn. "Access control lists (ACLs) in Azure Data Lake Storage Gen2." Azure Data Lake Storage Documentation. This document explicitly states, "Data Lake Storage Gen2 implements an access control model that supports both Azure role-based access control (Azure RBAC) and POSIX-like access control lists (ACLs)." It further details how these ACLs function at the file and directory level.

2. Microsoft Learn. "Introduction to Azure Data Lake Storage Gen2." Azure Data Lake Storage Documentation. In the section "Key features of Data Lake Storage Gen2," it lists "Hadoop compatible access: Data Lake Storage Gen2 allows you to manage and access data just as you would with a Hadoop Distributed File System (HDFS)... It also supports POSIX ACLs to set granular permissions on files and folders."

3. Microsoft Learn. "Authorize access to data in Azure Storage." Azure Storage Documentation. This page provides an overview of authorization methods for different Azure Storage services. For Blobs (and by extension, ADLS Gen2), it lists Azure RBAC, ACLs, and SAS. For Queues and Tables, it lists Shared Key, SAS, and Azure AD, with no mention of ACLs.