Stored Access Policy Vs Shared Access Signature (SAS) - Azure Blob Storage Access Permissions

Stored Access Policy vs Shared Access Signature - In this video, we look at something that we don't see discussed too often - the Stored Access Policy for containers. This is how you can create a Shared Access Signature (SAS) that can have its permissions revoked or revised.

This could be very useful if you want to grant someone access to a file but reserve the right to revoke that access without being too disruptive to your existing applications.

As you know, you can use an Access Key to give access to a storage account. But Access Keys are full permissions, and revoking them is disruptive to your operations. Shared Access Signatures also are difficult to revoke, as you need to regenerate the key as well. Additionally, there is no function to "save" SAS to your account to edit or delete them. Once created, they are valid.

The Stored Access Policy allows you to revise permissions after the fact, which can be handy.

#azure #microsoft #shared #SAS #revoking #generate #accesspolicy #storage #storageaccount

Please like the video, subscribe to see more, and leave a comment if there's anything I can cover relating to Microsoft Azure!

The best coupon links to my courses, including my popular AZ-900, DP-900, AI-900, AZ-700, SC-900, SC-300, AI-102, DP-100, DP-300, AZ-305, AZ-104 and AZ-204 courses are available on my website:

[GetCloudSkills]

Please subscribe and hit that thumbs up if you liked this video. Hit the notification bell to be updated on the latest contents I upload on my channel. Have a great day!

[joneslt]

I have watched countless videos on storage accounts and never once did anyone ever demonstrate SAS in action. In 8.24 I learned more than the 5 hours worth of videos I watched before this. There is a special place in heaven for instructors like you :)

[henryjb]

Well put. When I was reading official documentation, I thought, " What is the difference between the regular SAS and the policy". Thank you so much for explaining.

[ashxos]

Thank you Scott. Nowhere on the internet this concept is explained in detail, the way you explained.

[LencoTB]

The best explanation and demo I have seen on this topic. Short and to the point. Great work

[AzamFahmy]

Crisp, clear and to the point. Thank you for clarifying this. Microsoft's learning path's definition and explanations were too convoluted for me.

[CoopmanGreg]

Wow! Nice tip on how to logically disable an SAS using Stored Access Policy. Thanks!

[sasanknimmagadda]

Super Explanation with Demo !! Thank you Scott. This is such a clear explanation.

[chitranair]

You explained so well - simple and logical. Thank you!

[ravindranraghu]

very simple yet elaborate. Thanks Scott

[mozbius]

Is it just me or Azure GUI has changed making the provided instructions not quite right anymore?

When I go to click on "Storage Explorer (Preview)" I get instead "Storage Browser (preview)" which doesn't offer the option of clicking on "Get Shared Access Signature...". Instead I have to download separately "Microsoft Azure Storage Explorer" from which I can indeed click on "Get Shared Access Signature...".

[percelldeberry]

Thank you. Like most, I couldn't understand the Microsoft explanations. 🙂

[satyanarayanasheelam]

Scott Duffy, I'm a fan of you. A big thumbs up

[RockyRxx]

Fantastic, exactly what I was looking for. Thank you Scott, keep it up

[pritomdasradheshyam]

Very good explanation and certainly very important one!

[yeehaw]

Thank you for this video! MS Learn was not very clear on this topic

[sairaj]

Thank you Scott. This was a great video.

[NickLaoutaris]

thank Scott, these are amazing videos !

[md.hussainulislamsajib]

Very nicely explained! Thank you so much!

[React_Sessions]

Awesome stuff! Love your content dude.