question

KaizheZheng-1489 avatar image
0 Votes"
KaizheZheng-1489 asked KaizheZheng-1489 commented

Are SAS token usable with disabled network access?

Hello community,

I have created a custom policy to restrict the creation of public network access for storage accounts like written here: https://blog.kriation.com/2021/restrict-network-access-to-storage-accounts.html .

While trying to enable a upper limit restriction for SAS Tokens in the Storage Account like below, I received the error that it's been blocked by the same policy.
199137-image.png



Therefore I'm having the question, is it even possible to use SAS-Tokens when public network access is disabled?

Thanks und best regards

azure-storage-accountsazure-policy
image.png (34.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

SaiKishor-MSFT avatar image
1 Vote"
SaiKishor-MSFT answered

@KaizheZheng-1489 Thank you for reaching out to Microsoft Q&A. I understand that you are having issues with setting expiration limit for the SAS token.

To answer your question: Is it even possible to use SAS-Tokens when public network access is disabled?

Yes, you should be able to use SAS with private access enabled on the account. However, I understand that due to the custom policy that you created, its blocking the expiration policy. I would suggest you reach out to Azure Support to further investigate your policy and check other configuration details to determine what is causing this issue.

Hope this helps. Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.