KeeAnywhere
KeeAnywhere copied to clipboard
Access Azure Blob Storage with SAS token
This is an enhancement idea
Azure Blob storage provider allows to access files with access key. However, this kind of access has a few limitations: it always gives full admin access to whole storage account. Also there can be only 2 keys active, so everyone need to share the same key and they have to be rotated manually
However, Blob storage also allows to access the blobs with SAS tokens (Shared Access Signature). These are signed keys with limited operations and subjects and they can include expiry date. The only change in code would be to call StorageCredentials
constructor with one argument instead of two: docs
Adding this support would enable using Azure Blob Storage with more complex permissions