Azure integration methods
Learn about Azure integration methods.
Integration methods
After creating the storage account and a blob container, you can integrate them using one of two methods— access keys or a shared access signature (SAS):
Access keys provide full administrative access to your storage account, allowing any operation. They are suitable for scenarios requiring complete control but must be handled carefully due to their high level of access.
A shared access signature (SAS) offers more granular control, allowing access to specific resources for a limited time with restricted permissions. This method is ideal for scenarios where you need to grant a temporary access to clients or applications without exposing primary keys, enhancing security and flexibility in managing storage resources.
SAS configuration
Minimal required permissions to configure Azure Blob Storage for use with:
Allowed services:
Allowed resource types:
Allowed permissions:
To use replication tasks when granting permissions, these permissions must either be full or extended with Add and Create.
Allowed permissions for replication:
Generating the connection string
Generating the connection string with the specified permissions:
Login to the Azure portal as an administrator.
Select the storage account and click Shared Access Signature in the Settings tab.
Select the permissions described in the SAS configuration section of this article.
Click Generate SAS and connection string.
For setting up the blob storage, you will need the connection string:
Generating the connection string with the full permission:
Login to the Azure portal as an administrator.
Select the storage account.
Go to Access keys under the Security + networking menu section.
For setting up the blob storage, you will need the connection string:
Useful links and items
Last updated