Using shared access signatures

A SAS is a signed URI that provides defined access rights to specific resources within a storage account for a specified period. To use a SAS for accessing Azure Storage resources, you’ll need to have two components:

• The URI of the resource being accessed, for example, https://myaccount.blob.core.windows.net/container/file.txt
• The SAS token that you would have created and configured

The SAS token itself is comprised of several elements and it’s worth understanding the structure.

The SAS token structure

If we look at an example SAS token, we can inspect each element for our understanding: sp=rd&st=2022-06-04T13:35:54Z&se=2022-06-04T21:35:54Z&spr=https&sv=2020-08-04&sr=b&sig=wX4run5CPuFbQkCezJxGwOEv%2BQ2ODjVEVxn5Yrzo8ug%3D. Let’s take each element and explore its meaning:

• sp=rd: sp stands for signed permission. In this case, we have r and d, which stand for read and delete.
...