How to create Azure Container SAS Token signed with Account key with PowerShell?

Question

I need to create a SAS token for a container using PowerShell with an expiry date one year from now. If I use New-AzStorageContainerSASToken I cannot set an expiry date after 7 days because it uses a user delegation key.

For example, if I do this:

$container = New-AzStorageContainer -Name $saName -Context $backupContext
$token = $container | New-AzStorageContainerSASToken -Permission rwdl -ExpiryTime (Get-Date).AddYears(1)

I get error

New-AzStorageContainerSASToken: Generate User Delegation SAS with OAuth bases Storage context. User Delegate Key expiry time 20/07/2023 15:46:12 +00:00 must be in 7 days from now.

How can I specify to sign with the account key instead?

Do you have access to account key? Or have permissions to get the account key? — Gaurav Mantri
– Gaurav Mantri, Commented Jul 20, 2022 at 16:02

Gaurav Mantri · Accepted Answer · 2022-07-20 17:22:35Z

3

If you have access to the account name and key, you can create a context using that. You can then pass that context to New-AzStorageContainerSASToken Cmdlet.

Something like:

$ctx = New-AzStorageContext -StorageAccountName "account-name" -StorageAccountKey "account-key"
$container = New-AzStorageContainer -Name $saName -Context $ctx
$token = $container | New-AzStorageContainerSASToken -Permission rwdl -ExpiryTime (Get-Date).AddYears(1) -Context $ctx

You can learn more about New-AzStorageContext here: https://learn.microsoft.com/en-us/powershell/module/az.storage/new-azstoragecontext?view=azps-8.1.0.

answered Jul 20, 2022 at 17:22

Gaurav Mantri

137k17 gold badges247 silver badges282 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to create Azure Container SAS Token signed with Account key with PowerShell?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related