KeeAnywhere icon indicating copy to clipboard operation
KeeAnywhere copied to clipboard

Access Azure Blob Storage with SAS token

Open karol-gro opened this issue 3 years ago • 0 comments

This is an enhancement idea

Azure Blob storage provider allows to access files with access key. However, this kind of access has a few limitations: it always gives full admin access to whole storage account. Also there can be only 2 keys active, so everyone need to share the same key and they have to be rotated manually

However, Blob storage also allows to access the blobs with SAS tokens (Shared Access Signature). These are signed keys with limited operations and subjects and they can include expiry date. The only change in code would be to call StorageCredentials constructor with one argument instead of two: docs

Adding this support would enable using Azure Blob Storage with more complex permissions

karol-gro avatar Aug 11 '21 11:08 karol-gro