Azure SAS Token Expiration - Blob storage

Question

Hi team is there any way to find SAS token expiration policy ?

Tuhin Paul · Answer

Yes, you can find the SAS token expiration policy in Azure using the Azure Portal, Azure PowerShell, or Azure CLI. In the Azure Portal: Go to your Storage Account. Click on "Shared access signature" in the left-hand menu. Enter the desired settings for your SAS token (e.g., start time, expiry time, permissions, etc.). Click on "Create". You will be provided with a URL that includes the SAS token, along with the start time, expiry time, and other details of the SAS token. In Azure PowerShell: Open Azure PowerShell and connect to your subscription. Run the command New-AzStorageAccountSASToken to create a new SAS token for your storage account. Specify the desired settings for your SAS token (e.g., start time, expiry time, permissions, etc.). Run the command Get-AzStorageAccountSASToken to retrieve the details of the SAS token, including the start time, expiry time, and other details. In Azure CLI: Open the Azure CLI and connect to your subscription. Run the command az storage account generate-sas to create a new SAS token for your storage account. Specify the desired settings for your SAS token (e.g., start time, expiry time, permissions, etc.). Run the command az storage account show to retrieve the details of the storage account, including the start time, expiry time, and other details of the SAS token.

Rajeesh Menoth · Answer

Hi, Please check the following reference: https://stackoverflow.com/questions/58165314/is-there-any-way-to-check-programmatically-whether-sas-url-for-azure-blob-storag

Sarthak Varshney · Answer

You can programmatically parse the SAS token to extract these parameters, or you can manually inspect the token and extract the parameters by following the format of a SAS token. For example, a SAS token might look like this: https://myaccount.blob.core.windows.net/mycontainer/myblob?st=2022-01-01T00%3A00%3A00Z&se=2022-01-02T00%3A00%3A00Z&sp=r&sv=2021-08-06&rscc=&rsce=&skoid=&sktid=&skt=&ske=&ske=&rscc=&rsce=&rs=&sp=r In this example, the start time ( st ) is set to 2022-01-01T00:00:00Z and the end time ( se ) is set to 2022-01-02T00:00:00Z . This means that the SAS token is valid from January 1st, 2022 at 00:00:00 UTC to January 2nd, 2022 at 00:00:00 UTC. So, to find the expiration policy of a SAS token, you can examine the start time and end time parameters of the token.