Reporting on SAS Token Generation

Question

Reporting on SAS Token Generation

sjasper 1

Is there a way to create a report that lists the users that generate SAS tokens within a blob?

3 answers

Your answer

Answer 1

Sumarigo-MSFT 47,506 Microsoft Employee Moderator

@sjasper-5546There is no direct way to fetch the user list who generated SAS token.

You can see an entry list this when the request is accessed via SAS / SAS is generated. However, you cannot rely on this all the time, because this entry you will get most of the time for many other operations not just for SAS creation
ListAccountSAS and ListServiceSAS rest API is management plane operation and will not be captured in storage diagnostic logs.

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.

-----------------------------------------------------------------------------------------------------------------

Please don’t forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Sumarigo-MSFT 47,506 Reputation points Microsoft Employee Moderator

2020-11-20T06:02:33.903+00:00

@sjasper Just checking in to see if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Sumarigo-MSFT 47,506 Reputation points Microsoft Employee Moderator

2020-12-04T06:32:20.01+00:00

@sjasper Just checking in to see if the above answer helped. If this answers your query, please don’t forget to "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 2

Alberto Ramon 21

Hello @Sumarigo-MSFT Has been some update from 2020? or any alternative to monitor the creation of SAS token

Answer 3

Amrinder Singh 5,875 Microsoft Employee Volunteer Moderator

Hi @Alberto Ramon -

Storage doesn't keep tracks of SAS token that has been generated as part of compliance since SAS are mainly confidential data. This is also documented in the link as well. So, unfortunately there isn't any option to track SAS token still.

Let me know if there are any further queries and will be glad to assist.

Please don’t forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members

Amrinder Singh 5,875 Reputation points Microsoft Employee Volunteer Moderator

2024-02-27T09:03:55.9+00:00

Hi @Alberto Ramon

Kindly let us know if the above helps or you need further assistance on this issue. Please don’t forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Alberto Ramon 21 Reputation points

2024-03-17T11:37:25.07+00:00

Do this solve the problem Change Actor? "Identifying who made a change to your Azure resources"
Alberto Ramon 21 Reputation points

2024-03-17T11:42:32.84+00:00

Do Change Actor solve this problem? "Identifying who made a change to your Azure resources "

@Amrinder singh If this can't do . . . nothing will do :D
Sumarigo-MSFT 47,506 Reputation points Microsoft Employee Moderator

2024-03-18T03:10:16.5633333+00:00

@Alberto Ramon You may leave your feedback here. All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

Share via

Reporting on SAS Token Generation

3 answers

Your answer