Shared Access Signatures

With Shared Access Signatures (SAS) tokens in Azure, you can grant limited access to your storage resources without sharing your account keys.

SAS tokens also give you granular control over who can access your data. Precisely define permissions, time limits, and data scope

Precisely define client permissions, time limits, and data scope (specific types of folders, data types, date ranges, data formats and even attributes)

Note: data scope can include: specific files or folders, data types (e.g., images, documents, databases), data ranges (e.g., date ranges, numerical ranges), data formats (e.g., CSV, JSON, XML), data attributes (e.g., metadata, tags, categories).