In this video, learn how to configure granular access to Azure Blob storage using shared access signatures, SAS. Configuring storage access control with SAS is a key part of implementing least privilege access to Azure Storage.
- [Instructor] The AZ-500 exam will test your knowledge … of securing Azure storage and shared access policies … and shared access signatures or SAS are quite likely … to come up on the exam. … You'll want to be familiar with the concept of ad hoc SAS, … where we define all the attributes at creation time … of the SAS. … But also stored access policies where we can manage … the constraints, the permissions and the start … and end time for multiple shared access signatures. … And this gives us advantage both in reducing the effort … at provisioning time but also in revoking permissions … in bulk as well. … So I'm going to go to the Azure portal and I'll select … Storage accounts and I'll pick the storage account … for which I would like to generate a SAS. … And under Blob service, I'll select Containers. … And then I'll click on the container … for which I'd like to grant access. … And then I will choose Access policy. … And here we see Stored access policies. … I'll click Add policy. …
- Configuring security policies
- Enabling data authentication and auditing
- Configuring security for storage accounts
- Configuring Azure AD authentication
- Configuring security for Cosmos DB and Azure Data Lake