Share via

Revoke existing SAS token for ADLSgen2

Arvind Kumar 1 Reputation point
2020-11-10T05:54:06.69+00:00

How can i revoke the existing SAS token generated for Azure datalake storage . As of now , I only see option of changing the Account key.

Azure Data Lake Storage
Azure Data Lake Storage
An Azure service that provides an enterprise-wide hyper-scale repository for big data analytic workloads and is integrated with Azure Blob Storage.
1,426 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. MartinJaffer-MSFT 26,061 Reputation points
    2020-11-10T20:28:39.35+00:00

    Hello @arvindkumardhariwal-3864 and welcome to Microsoft Q&A.

    The options for revoking a SAS depend upon the type of SAS and whether you have a stored access policy. The below is an excerpt taken from Best Practices when using SAS.

    Stored access policies give you the option to revoke permissions for a service SAS without having to regenerate the storage account keys. Set the expiration on these very far in the future (or infinite) and make sure it's regularly updated to move it farther into the future.

    A stored access policy is defined on a resource container, which can be a blob container, table, queue, or file share. The stored access policy can be used to manage constraints for one or more service shared access signatures. When you associate a service SAS with a stored access policy, the SAS inherits the constraints—the start time, expiry time, and permissions—defined for the stored access policy.

    Without a stored access policy, I think you need to change the Account key.

    0 comments