Save Signature Service Authorization with airSlate SignNow

Save signature service authorization

hello guys welcome back to a new episode how to generate a shared access signature to generator sauce is better simple before doing this let me explain how this it's Orcs and some recommendation our best practice when you can use this the sitting so with sass you can delegate access to a resource in your storage account without sharing your account Kay so actually that's the strong point of visiting and azure storage support free type of office the first one is user delegation but use Azure Active Directory credential and this is applied to blob service only the second one is a service level and can be delegated just for blob queue table and aja files and the last one account level is used to delegate access to all four storage services to mention but all this types of shared access ignitor assign it via live but points two to one our more storage resource and include a sauce token that contain a special set of quail pyramids like validity time permission protocols IP address type of resort and so on if this really is leaked you could be in trouble because your storage account called be compromised and to avoid this leaks follow the best practice below okay so let me start with demonstration I already created a storage account I just have to click to shared access in nature and let me begin if account level this means but this K is related to all services before generating saw string you have a lot of option here where you can configure and manipulate for a specific service resource of course the permission start and end time protocols and IP address to allow for specific IP address our range of IP addresses so the scope of this string is to provide access to clients that should have access for a while and specific right so now let's me try to access a file from from the container to do this god blobs I already created two container here and uploaded some image for this demo and let choose a random image copy red and paste so very source is not well because we don't use the token so let's try to add the token for this array and uncheck if so let me double this session for jaywalking so start dated today and it's okay for me so let's generate the token copy this and go to this really and paste the token after image as you can see the resource is avaible now let's simulate an expiry token to check if the resource will be the possible to access so let me change with date 23 generate a new size token and let me paste here as you can see we don't have authorization for this image with this token I mean and of the education error detail can be found here and it's about time frame okay all these steps are valid also for Asia files tables and thank you now let me show you how to generate a service level sass for example for blob file to mention that token can be not generated at the container level and you have to wait to access your block files from the specific container first is to change access level for your container and all blobs from this container will be reachable let me do this container okay and now go to inside of this container copy them over and paste so regimen the image is available now you should realize that this option called the dangerous because everyone can reach your yada as well this option doesn't offer you flexibility because you can specify IP address our range our protocols like HTTP or HTTPS the second option is to generate a soft token for a specific blog this means that you should go inside of container select your blog and generate sass here we have option light permission start and the end time configure for specific IP address protocols to use HTTP or HTTPS and now to generate the nasturtium copy this this is a blob sauce early and paste here as you can see the image is available and the last one I use aggregation sauce to do this you must have a role assignment as a storage blob delegator that will permit you to generate the key and with this role can be added directly via subscription access control our specific blog the next episode will be about this subject how to create a user delegation SAS hope the information for today was useful for you and I'll see you next time [Music]