Setting BlobAccessTier while generating upload SAS Url

Question

We are uploading data to azure storage account using SAS URL having write permissions. We would like to upload these blob with AccessTier as Cold, though the default Storage Account one is Hot. Is there a way to specify the AccessTier while generating upload SAS Url.

Many thanks in advance.

Answer 1

Hi @Janani - Thanks for reaching out on Q&A Forum.

SAS doesn't provide option to set the access tier rather it is being considered as the auth mechanism.

When you will be uploading the blob to storage, you will be mainly calling the PUT BLOB operation and let's consider you are making use of SAS as the auth scheme in here.

https://learn.microsoft.com/en-us/rest/api/storageservices/put-blob?tabs=microsoft-entra-id

In PutBlob Tier, you can pass the access tier value as COLD for header x-ms-access-tier which will create the Blob in Cold Tier irrespective of the default access tier on the account level.

Note: Cold tier is supported for version 2021-12-02 and later.If you are making use of any 3rd party tool which doesn't allow setting these headers, you can also explore for option of moving the tier from Hot to Cold tier post uploading via LCM as well.

https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview#rule-actions

Please let me know for any further queries and will be glad to assist.

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

In short no - access tier is not supported as part of the SAS token properties

---

hth

Marcin