Shared Access Signatures

Shared Access Signatures (SAS) is a powerful tool provided by Azure Blob Storage. An SAS provides a way to grant access to a blob, container, or directory without needing to share account access keys. This makes it a secure and convenient way to share data with others or to allow applications to access data without needing to grant them full access to your storage account.

Using SAS

To create an SAS, you can use either the Azure Portal, the Azure SDKs, or the Azure Storage REST API. When creating an SAS, you specify the following information:

• The resource that the SAS applies to (a blob, container, or directory)
• The permissions that the SAS grants (read, write, delete, etc.)
• The expiry time of the SAS
• The IP address or range of IP addresses that the SAS is valid for
• The protocol that the SAS is valid for (HTTP or HTTPS)

Once you have created an SAS, you can share it with others or embed it in a URL that you provide to applications. Anyone with the SAS will be able to access the resource that the SAS applies to within the specified permissions and time frame.

Benefits of SAS

Using SAS offers several benefits, including: