Both a service SAS and an account SAS are signed with the storage account key. For more information, see Create a user delegation SAS. A client that creates a user delegation SAS must be assigned an Azure RBAC role that includes the Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey action. A SAS that is signed with Azure AD credentials is a user delegation SAS. With a key created using Azure Active Directory (Azure AD) credentials.When you create a SAS, you specify its constraints, including which Azure Storage resources a client is allowed to access, what permissions they have on those resources, and how long the SAS is valid.Įvery SAS is signed with a key. A shared access signature (SAS) enables you to grant limited access to containers and blobs in your storage account.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |