Learn about shared access signatures as a means of granting minimum privileges for accessing an Azure storage account, limiting the access to a service, a type of access, and even by a date/time.
- [Instructor] To adhere to the principle…of minimum privilege,…we will avoid using shared keys…and rather use shared access signatures…as a way of providing the specific limited privileges…a client needs for accessing a resource…within the Azure Storage account.…In particular, shared access signatures are used…for blobs, files, and other mechanisms…where we want to grant a specific permission…to a client to take a very specific action.…Looking in the Azure Portal,…select one of your storage accounts…and below the Overview, below Access Keys,…is Shared access signature.…
Click on Shared access signature…and you'll see several of the options…on the right-hand side.…So, shared access signature is essentially a unique token…being generated for a client for a specific purpose.…In particular, we can limit by service,…so we can grant access to just one service,…be it Blob, File, Queue, or Table storage,…we can limit the access by the type of resource,…Service, Container, Object itself,…and of course, Read, Write, Delete,…
- Azure Storage overview
- Azure Storage security
- Deploying Azure Storage
- Accessing Azure Storage files
- Passing messages with Azure Storage queues
- Storing unstructured data with Azure Storage blobs
- Storing structured data in Azure Storage tables (Cosmos DB)
Skill Level Intermediate
4. Azure Storage Files
5. Azure Storage Queues
6. Azure Storage Blobs
7. Azure Storage Tables
Next steps1m 19s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.