I am going to upload some csv to blob storage , and use log analytics to view it 
from Log analytics to access blob storage , can only use sas ? how can we hide this sas ??
I am going to upload some csv to blob storage , and use log analytics to view it 
from Log analytics to access blob storage , can only use sas ? how can we hide this sas ??
@sakuraime As far as I know , SAS token can't be hidden in this scenario. The recommendation is when using a user delegation SAS token in the connection string, the AAD principal which the operation is executed on-behalf-of must be assigned (minimally) the Storage Blob Data Reader role for read operations, or Storage Blob Data Contributor for write (for example, export) operations.
You can check Obfuscated String literals concept in kusto which can be applied, when querying the tables using secret information such as SAS.
5 people are following this question.