The easiest method would be to generate a SAS for the container like you stated. More examples are available in the CLI documentation. Make sure you include all the necessary permissions for the SAS token, a list can be found here.
Please try generating the SAS token again and let me know if it works for you. If it fails please give me the command you uses to generate the token as well as how you are attempting to use the token.
-------------------------------
Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.