Using SASs

A SAS is a signed URI that provides defined access rights to specific resources within a storage account for a specified period. To use a SAS to access Azure Storage resources, you’ll need to have two components:

• The URI of the resource being accessed, for example, https: //myaccount.blob.core.windows.net/container/file.txt.
• The SAS token that you will have created and configured.

The SAS token itself comprises several elements, and it can be useful to recognize the structure.

The SAS Token Structure

If you examine an example SAS token, you can inspect each element for your understanding: sp=rd&st=2022-06-04T13:35:54Z&se=2022-06-04T21:35:54Z&spr=https&sv=2020-08-04&sr=b&sig=wX4run5CPuFbQkCezJxGwOEv%2BQ2ODjVEVxn5Yrzo8ug%3D. Let’s take each element and explore its meaning:

• sp=rd: sp stands for “signed permission.” In this case, you have r and d, which stand for “read” and “...