Hi Ed,
I assume you have provided the credentials to the storage account prior to the creation or upload option? -
If you'd rather use a SAS token to authorize access to blob data, then you can append that token to the resource URL in each AzCopy command. For example: 'https://<storage-account-name>.blob.core.windows.net/<container-name><SAS-token>'
.