To connect to Microsoft Azure Blob Storage using shared access signature, you need to configure the minimum permissions for shared access signature authentication and generate the SAS token in the Azure portal.
You can generate the SAS token for the storage account or for the container.
To generate the SAS token for the storage account, on the Azure portal, go to
Security + Networking
, and click
Shared access signature
.
Select the minimum permissions required for shared access signature authentication, as shown in the following image:
To generate the SAS token for the Blob container, go to
Settings
of the container, and click
Shared access tokens
. You can use either the Account key or User delegation key signing method. If you use the User delegation key signing method, ensure that you have the
Storage Blob Data Owner
role for the container or the storage account.
Select the minimum permissions required for shared access signature authentication, as shown in the following image: