Working with SAS Tokens

SAS tokens are secure access tokens that provide delegated access to resources on your storage account. The storage service confirms the SAS token is valid in order to grant access. The construct of a SAS token includes the permissions granted on the token, the date validity, and the signing key for the storage account. When creating a SAS token, several items that govern the process of granting access at a granular level need to be considered. They are as follows:

• Resource types that the client might use
• Permissions on the resource types that are required
• The period the SAS key should function for

Types of SAS

There are three types of SAS supported by Azure Storage:

• User-delegated SAS: This is a SAS token that is secured by Entra ID credentials.
• Account SAS: An account SAS is created and secured using a storage key. The permissions granted can span several services (blob, file, queue, and table), as well as accessing permissions...