 <p>If you want to do it with DSC, here's a sample: <a href="https://github.com/bmoore-msft/AzureRM-Samples/tree/master/VMDSCInstallFile" rel="nofollow">https://github.com/bmoore-msft/AzureRM-Samples/tree/master/VMDSCInstallFile</a>. Ed's answer might be a simpler approach though. The key here is getting the credentials to the VM to be able to pull from storage. That means whether you're using DSC or a custom script, you need to get the location/uri and a sasToken to the script (unless the files are unsecured). The DSC sample above will give you a way to pass the uri/token that will work in either workflow. Look at the PS script in the root to see how the uri &amp; token are created and passed to the template deployment.</p>