1. Packages
  2. Azure Classic
  3. API Docs
  4. storage
  5. getAccountSAS

We recommend using Azure Native.

Azure v6.10.0 published on Tuesday, Nov 19, 2024 by Pulumi

azure.storage.getAccountSAS

Explore with Pulumi AI

azure logo

We recommend using Azure Native.

Azure v6.10.0 published on Tuesday, Nov 19, 2024 by Pulumi

    Use this data source to obtain a Shared Access Signature (SAS Token) for an existing Storage Account.

    Shared access signatures allow fine-grained, ephemeral access control to various aspects of an Azure Storage Account.

    Note that this is an Account SAS and not a Service SAS.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as azure from "@pulumi/azure";
    
    const exampleResourceGroup = new azure.core.ResourceGroup("example", {
        name: "resourceGroupName",
        location: "West Europe",
    });
    const exampleAccount = new azure.storage.Account("example", {
        name: "storageaccountname",
        resourceGroupName: exampleResourceGroup.name,
        location: exampleResourceGroup.location,
        accountTier: "Standard",
        accountReplicationType: "GRS",
        tags: {
            environment: "staging",
        },
    });
    const example = azure.storage.getAccountSASOutput({
        connectionString: exampleAccount.primaryConnectionString,
        httpsOnly: true,
        signedVersion: "2017-07-29",
        resourceTypes: {
            service: true,
            container: false,
            object: false,
        },
        services: {
            blob: true,
            queue: false,
            table: false,
            file: false,
        },
        start: "2018-03-21T00:00:00Z",
        expiry: "2020-03-21T00:00:00Z",
        permissions: {
            read: true,
            write: true,
            "delete": false,
            list: false,
            add: true,
            create: true,
            update: false,
            process: false,
            tag: false,
            filter: false,
        },
    });
    export const sasUrlQueryString = example.apply(example => example.sas);
    
    import pulumi
    import pulumi_azure as azure
    
    example_resource_group = azure.core.ResourceGroup("example",
        name="resourceGroupName",
        location="West Europe")
    example_account = azure.storage.Account("example",
        name="storageaccountname",
        resource_group_name=example_resource_group.name,
        location=example_resource_group.location,
        account_tier="Standard",
        account_replication_type="GRS",
        tags={
            "environment": "staging",
        })
    example = azure.storage.get_account_sas_output(connection_string=example_account.primary_connection_string,
        https_only=True,
        signed_version="2017-07-29",
        resource_types={
            "service": True,
            "container": False,
            "object": False,
        },
        services={
            "blob": True,
            "queue": False,
            "table": False,
            "file": False,
        },
        start="2018-03-21T00:00:00Z",
        expiry="2020-03-21T00:00:00Z",
        permissions={
            "read": True,
            "write": True,
            "delete": False,
            "list": False,
            "add": True,
            "create": True,
            "update": False,
            "process": False,
            "tag": False,
            "filter": False,
        })
    pulumi.export("sasUrlQueryString", example.sas)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
    	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/storage"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		exampleResourceGroup, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
    			Name:     pulumi.String("resourceGroupName"),
    			Location: pulumi.String("West Europe"),
    		})
    		if err != nil {
    			return err
    		}
    		exampleAccount, err := storage.NewAccount(ctx, "example", &storage.AccountArgs{
    			Name:                   pulumi.String("storageaccountname"),
    			ResourceGroupName:      exampleResourceGroup.Name,
    			Location:               exampleResourceGroup.Location,
    			AccountTier:            pulumi.String("Standard"),
    			AccountReplicationType: pulumi.String("GRS"),
    			Tags: pulumi.StringMap{
    				"environment": pulumi.String("staging"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		example := storage.GetAccountSASOutput(ctx, storage.GetAccountSASOutputArgs{
    			ConnectionString: exampleAccount.PrimaryConnectionString,
    			HttpsOnly:        pulumi.Bool(true),
    			SignedVersion:    pulumi.String("2017-07-29"),
    			ResourceTypes: &storage.GetAccountSASResourceTypesArgs{
    				Service:   pulumi.Bool(true),
    				Container: pulumi.Bool(false),
    				Object:    pulumi.Bool(false),
    			},
    			Services: &storage.GetAccountSASServicesArgs{
    				Blob:  pulumi.Bool(true),
    				Queue: pulumi.Bool(false),
    				Table: pulumi.Bool(false),
    				File:  pulumi.Bool(false),
    			},
    			Start:  pulumi.String("2018-03-21T00:00:00Z"),
    			Expiry: pulumi.String("2020-03-21T00:00:00Z"),
    			Permissions: &storage.GetAccountSASPermissionsArgs{
    				Read:    pulumi.Bool(true),
    				Write:   pulumi.Bool(true),
    				Delete:  pulumi.Bool(false),
    				List:    pulumi.Bool(false),
    				Add:     pulumi.Bool(true),
    				Create:  pulumi.Bool(true),
    				Update:  pulumi.Bool(false),
    				Process: pulumi.Bool(false),
    				Tag:     pulumi.Bool(false),
    				Filter:  pulumi.Bool(false),
    			},
    		}, nil)
    		ctx.Export("sasUrlQueryString", example.ApplyT(func(example storage.GetAccountSASResult) (*string, error) {
    			return &example.Sas, nil
    		}).(pulumi.StringPtrOutput))
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Azure = Pulumi.Azure;
    
    return await Deployment.RunAsync(() => 
    {
        var exampleResourceGroup = new Azure.Core.ResourceGroup("example", new()
        {
            Name = "resourceGroupName",
            Location = "West Europe",
        });
    
        var exampleAccount = new Azure.Storage.Account("example", new()
        {
            Name = "storageaccountname",
            ResourceGroupName = exampleResourceGroup.Name,
            Location = exampleResourceGroup.Location,
            AccountTier = "Standard",
            AccountReplicationType = "GRS",
            Tags = 
            {
                { "environment", "staging" },
            },
        });
    
        var example = Azure.Storage.GetAccountSAS.Invoke(new()
        {
            ConnectionString = exampleAccount.PrimaryConnectionString,
            HttpsOnly = true,
            SignedVersion = "2017-07-29",
            ResourceTypes = new Azure.Storage.Inputs.GetAccountSASResourceTypesInputArgs
            {
                Service = true,
                Container = false,
                Object = false,
            },
            Services = new Azure.Storage.Inputs.GetAccountSASServicesInputArgs
            {
                Blob = true,
                Queue = false,
                Table = false,
                File = false,
            },
            Start = "2018-03-21T00:00:00Z",
            Expiry = "2020-03-21T00:00:00Z",
            Permissions = new Azure.Storage.Inputs.GetAccountSASPermissionsInputArgs
            {
                Read = true,
                Write = true,
                Delete = false,
                List = false,
                Add = true,
                Create = true,
                Update = false,
                Process = false,
                Tag = false,
                Filter = false,
            },
        });
    
        return new Dictionary<string, object?>
        {
            ["sasUrlQueryString"] = example.Apply(getAccountSASResult => getAccountSASResult.Sas),
        };
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azure.core.ResourceGroup;
    import com.pulumi.azure.core.ResourceGroupArgs;
    import com.pulumi.azure.storage.Account;
    import com.pulumi.azure.storage.AccountArgs;
    import com.pulumi.azure.storage.StorageFunctions;
    import com.pulumi.azure.storage.inputs.GetAccountSASArgs;
    import com.pulumi.azure.storage.inputs.GetAccountSASResourceTypesArgs;
    import com.pulumi.azure.storage.inputs.GetAccountSASServicesArgs;
    import com.pulumi.azure.storage.inputs.GetAccountSASPermissionsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()
                .name("resourceGroupName")
                .location("West Europe")
                .build());
    
            var exampleAccount = new Account("exampleAccount", AccountArgs.builder()
                .name("storageaccountname")
                .resourceGroupName(exampleResourceGroup.name())
                .location(exampleResourceGroup.location())
                .accountTier("Standard")
                .accountReplicationType("GRS")
                .tags(Map.of("environment", "staging"))
                .build());
    
            final var example = StorageFunctions.getAccountSAS(GetAccountSASArgs.builder()
                .connectionString(exampleAccount.primaryConnectionString())
                .httpsOnly(true)
                .signedVersion("2017-07-29")
                .resourceTypes(GetAccountSASResourceTypesArgs.builder()
                    .service(true)
                    .container(false)
                    .object(false)
                    .build())
                .services(GetAccountSASServicesArgs.builder()
                    .blob(true)
                    .queue(false)
                    .table(false)
                    .file(false)
                    .build())
                .start("2018-03-21T00:00:00Z")
                .expiry("2020-03-21T00:00:00Z")
                .permissions(GetAccountSASPermissionsArgs.builder()
                    .read(true)
                    .write(true)
                    .delete(false)
                    .list(false)
                    .add(true)
                    .create(true)
                    .update(false)
                    .process(false)
                    .tag(false)
                    .filter(false)
                    .build())
                .build());
    
            ctx.export("sasUrlQueryString", example.applyValue(getAccountSASResult -> getAccountSASResult).applyValue(example -> example.applyValue(getAccountSASResult -> getAccountSASResult.sas())));
        }
    }
    
    resources:
      exampleResourceGroup:
        type: azure:core:ResourceGroup
        name: example
        properties:
          name: resourceGroupName
          location: West Europe
      exampleAccount:
        type: azure:storage:Account
        name: example
        properties:
          name: storageaccountname
          resourceGroupName: ${exampleResourceGroup.name}
          location: ${exampleResourceGroup.location}
          accountTier: Standard
          accountReplicationType: GRS
          tags:
            environment: staging
    variables:
      example:
        fn::invoke:
          Function: azure:storage:getAccountSAS
          Arguments:
            connectionString: ${exampleAccount.primaryConnectionString}
            httpsOnly: true
            signedVersion: 2017-07-29
            resourceTypes:
              service: true
              container: false
              object: false
            services:
              blob: true
              queue: false
              table: false
              file: false
            start: 2018-03-21T00:00:00Z
            expiry: 2020-03-21T00:00:00Z
            permissions:
              read: true
              write: true
              delete: false
              list: false
              add: true
              create: true
              update: false
              process: false
              tag: false
              filter: false
    outputs:
      sasUrlQueryString: ${example.sas}
    

    Using getAccountSAS

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAccountSAS(args: GetAccountSASArgs, opts?: InvokeOptions): Promise<GetAccountSASResult>
    function getAccountSASOutput(args: GetAccountSASOutputArgs, opts?: InvokeOptions): Output<GetAccountSASResult>
    def get_account_sas(connection_string: Optional[str] = None,
                        expiry: Optional[str] = None,
                        https_only: Optional[bool] = None,
                        ip_addresses: Optional[str] = None,
                        permissions: Optional[GetAccountSASPermissions] = None,
                        resource_types: Optional[GetAccountSASResourceTypes] = None,
                        services: Optional[GetAccountSASServices] = None,
                        signed_version: Optional[str] = None,
                        start: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetAccountSASResult
    def get_account_sas_output(connection_string: Optional[pulumi.Input[str]] = None,
                        expiry: Optional[pulumi.Input[str]] = None,
                        https_only: Optional[pulumi.Input[bool]] = None,
                        ip_addresses: Optional[pulumi.Input[str]] = None,
                        permissions: Optional[pulumi.Input[GetAccountSASPermissionsArgs]] = None,
                        resource_types: Optional[pulumi.Input[GetAccountSASResourceTypesArgs]] = None,
                        services: Optional[pulumi.Input[GetAccountSASServicesArgs]] = None,
                        signed_version: Optional[pulumi.Input[str]] = None,
                        start: Optional[pulumi.Input[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetAccountSASResult]
    func GetAccountSAS(ctx *Context, args *GetAccountSASArgs, opts ...InvokeOption) (*GetAccountSASResult, error)
    func GetAccountSASOutput(ctx *Context, args *GetAccountSASOutputArgs, opts ...InvokeOption) GetAccountSASResultOutput

    > Note: This function is named GetAccountSAS in the Go SDK.

    public static class GetAccountSAS 
    {
        public static Task<GetAccountSASResult> InvokeAsync(GetAccountSASArgs args, InvokeOptions? opts = null)
        public static Output<GetAccountSASResult> Invoke(GetAccountSASInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetAccountSASResult> getAccountSAS(GetAccountSASArgs args, InvokeOptions options)
    // Output-based functions aren't available in Java yet
    
    fn::invoke:
      function: azure:storage/getAccountSAS:getAccountSAS
      arguments:
        # arguments dictionary

    The following arguments are supported:

    ConnectionString string
    The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
    Expiry string

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    NOTE: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    Permissions GetAccountSASPermissions
    A permissions block as defined below.
    ResourceTypes GetAccountSASResourceTypes
    A resource_types block as defined below.
    Services GetAccountSASServices
    A services block as defined below.
    Start string
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    HttpsOnly bool
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    IpAddresses string
    IP address, or a range of IP addresses, from which to accept requests. When specifying a range, note that the range is inclusive.
    SignedVersion string
    Specifies the signed storage service version to use to authorize requests made with this account SAS. Defaults to 2017-07-29.
    ConnectionString string
    The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
    Expiry string

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    NOTE: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    Permissions GetAccountSASPermissions
    A permissions block as defined below.
    ResourceTypes GetAccountSASResourceTypes
    A resource_types block as defined below.
    Services GetAccountSASServices
    A services block as defined below.
    Start string
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    HttpsOnly bool
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    IpAddresses string
    IP address, or a range of IP addresses, from which to accept requests. When specifying a range, note that the range is inclusive.
    SignedVersion string
    Specifies the signed storage service version to use to authorize requests made with this account SAS. Defaults to 2017-07-29.
    connectionString String
    The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
    expiry String

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    NOTE: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    permissions GetAccountSASPermissions
    A permissions block as defined below.
    resourceTypes GetAccountSASResourceTypes
    A resource_types block as defined below.
    services GetAccountSASServices
    A services block as defined below.
    start String
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    httpsOnly Boolean
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ipAddresses String
    IP address, or a range of IP addresses, from which to accept requests. When specifying a range, note that the range is inclusive.
    signedVersion String
    Specifies the signed storage service version to use to authorize requests made with this account SAS. Defaults to 2017-07-29.
    connectionString string
    The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
    expiry string

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    NOTE: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    permissions GetAccountSASPermissions
    A permissions block as defined below.
    resourceTypes GetAccountSASResourceTypes
    A resource_types block as defined below.
    services GetAccountSASServices
    A services block as defined below.
    start string
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    httpsOnly boolean
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ipAddresses string
    IP address, or a range of IP addresses, from which to accept requests. When specifying a range, note that the range is inclusive.
    signedVersion string
    Specifies the signed storage service version to use to authorize requests made with this account SAS. Defaults to 2017-07-29.
    connection_string str
    The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
    expiry str

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    NOTE: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    permissions GetAccountSASPermissions
    A permissions block as defined below.
    resource_types GetAccountSASResourceTypes
    A resource_types block as defined below.
    services GetAccountSASServices
    A services block as defined below.
    start str
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    https_only bool
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ip_addresses str
    IP address, or a range of IP addresses, from which to accept requests. When specifying a range, note that the range is inclusive.
    signed_version str
    Specifies the signed storage service version to use to authorize requests made with this account SAS. Defaults to 2017-07-29.
    connectionString String
    The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
    expiry String

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    NOTE: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    permissions Property Map
    A permissions block as defined below.
    resourceTypes Property Map
    A resource_types block as defined below.
    services Property Map
    A services block as defined below.
    start String
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    httpsOnly Boolean
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ipAddresses String
    IP address, or a range of IP addresses, from which to accept requests. When specifying a range, note that the range is inclusive.
    signedVersion String
    Specifies the signed storage service version to use to authorize requests made with this account SAS. Defaults to 2017-07-29.

    getAccountSAS Result

    The following output properties are available:

    ConnectionString string
    Expiry string
    Id string
    The provider-assigned unique ID for this managed resource.
    Permissions GetAccountSASPermissions
    ResourceTypes GetAccountSASResourceTypes
    Sas string
    The computed Account Shared Access Signature (SAS).
    Services GetAccountSASServices
    Start string
    HttpsOnly bool
    IpAddresses string
    SignedVersion string
    ConnectionString string
    Expiry string
    Id string
    The provider-assigned unique ID for this managed resource.
    Permissions GetAccountSASPermissions
    ResourceTypes GetAccountSASResourceTypes
    Sas string
    The computed Account Shared Access Signature (SAS).
    Services GetAccountSASServices
    Start string
    HttpsOnly bool
    IpAddresses string
    SignedVersion string
    connectionString String
    expiry String
    id String
    The provider-assigned unique ID for this managed resource.
    permissions GetAccountSASPermissions
    resourceTypes GetAccountSASResourceTypes
    sas String
    The computed Account Shared Access Signature (SAS).
    services GetAccountSASServices
    start String
    httpsOnly Boolean
    ipAddresses String
    signedVersion String
    connectionString string
    expiry string
    id string
    The provider-assigned unique ID for this managed resource.
    permissions GetAccountSASPermissions
    resourceTypes GetAccountSASResourceTypes
    sas string
    The computed Account Shared Access Signature (SAS).
    services GetAccountSASServices
    start string
    httpsOnly boolean
    ipAddresses string
    signedVersion string
    connection_string str
    expiry str
    id str
    The provider-assigned unique ID for this managed resource.
    permissions GetAccountSASPermissions
    resource_types GetAccountSASResourceTypes
    sas str
    The computed Account Shared Access Signature (SAS).
    services GetAccountSASServices
    start str
    https_only bool
    ip_addresses str
    signed_version str
    connectionString String
    expiry String
    id String
    The provider-assigned unique ID for this managed resource.
    permissions Property Map
    resourceTypes Property Map
    sas String
    The computed Account Shared Access Signature (SAS).
    services Property Map
    start String
    httpsOnly Boolean
    ipAddresses String
    signedVersion String

    Supporting Types

    GetAccountSASPermissions

    Add bool
    Should Add permissions be enabled for this SAS?
    Create bool
    Should Create permissions be enabled for this SAS?
    Delete bool
    Should Delete permissions be enabled for this SAS?
    Filter bool

    Should Filter by Index Tags permissions be enabled for this SAS?

    Refer to the SAS creation reference from Azure for additional details on the fields above.

    List bool
    Should List permissions be enabled for this SAS?
    Process bool
    Should Process permissions be enabled for this SAS?
    Read bool
    Should Read permissions be enabled for this SAS?
    Tag bool
    Should Get / Set Index Tags permissions be enabled for this SAS?
    Update bool
    Should Update permissions be enabled for this SAS?
    Write bool
    Should Write permissions be enabled for this SAS?
    Add bool
    Should Add permissions be enabled for this SAS?
    Create bool
    Should Create permissions be enabled for this SAS?
    Delete bool
    Should Delete permissions be enabled for this SAS?
    Filter bool

    Should Filter by Index Tags permissions be enabled for this SAS?

    Refer to the SAS creation reference from Azure for additional details on the fields above.

    List bool
    Should List permissions be enabled for this SAS?
    Process bool
    Should Process permissions be enabled for this SAS?
    Read bool
    Should Read permissions be enabled for this SAS?
    Tag bool
    Should Get / Set Index Tags permissions be enabled for this SAS?
    Update bool
    Should Update permissions be enabled for this SAS?
    Write bool
    Should Write permissions be enabled for this SAS?
    add Boolean
    Should Add permissions be enabled for this SAS?
    create Boolean
    Should Create permissions be enabled for this SAS?
    delete Boolean
    Should Delete permissions be enabled for this SAS?
    filter Boolean

    Should Filter by Index Tags permissions be enabled for this SAS?

    Refer to the SAS creation reference from Azure for additional details on the fields above.

    list Boolean
    Should List permissions be enabled for this SAS?
    process Boolean
    Should Process permissions be enabled for this SAS?
    read Boolean
    Should Read permissions be enabled for this SAS?
    tag Boolean
    Should Get / Set Index Tags permissions be enabled for this SAS?
    update Boolean
    Should Update permissions be enabled for this SAS?
    write Boolean
    Should Write permissions be enabled for this SAS?
    add boolean
    Should Add permissions be enabled for this SAS?
    create boolean
    Should Create permissions be enabled for this SAS?
    delete boolean
    Should Delete permissions be enabled for this SAS?
    filter boolean

    Should Filter by Index Tags permissions be enabled for this SAS?

    Refer to the SAS creation reference from Azure for additional details on the fields above.

    list boolean
    Should List permissions be enabled for this SAS?
    process boolean
    Should Process permissions be enabled for this SAS?
    read boolean
    Should Read permissions be enabled for this SAS?
    tag boolean
    Should Get / Set Index Tags permissions be enabled for this SAS?
    update boolean
    Should Update permissions be enabled for this SAS?
    write boolean
    Should Write permissions be enabled for this SAS?
    add bool
    Should Add permissions be enabled for this SAS?
    create bool
    Should Create permissions be enabled for this SAS?
    delete bool
    Should Delete permissions be enabled for this SAS?
    filter bool

    Should Filter by Index Tags permissions be enabled for this SAS?

    Refer to the SAS creation reference from Azure for additional details on the fields above.

    list bool
    Should List permissions be enabled for this SAS?
    process bool
    Should Process permissions be enabled for this SAS?
    read bool
    Should Read permissions be enabled for this SAS?
    tag bool
    Should Get / Set Index Tags permissions be enabled for this SAS?
    update bool
    Should Update permissions be enabled for this SAS?
    write bool
    Should Write permissions be enabled for this SAS?
    add Boolean
    Should Add permissions be enabled for this SAS?
    create Boolean
    Should Create permissions be enabled for this SAS?
    delete Boolean
    Should Delete permissions be enabled for this SAS?
    filter Boolean

    Should Filter by Index Tags permissions be enabled for this SAS?

    Refer to the SAS creation reference from Azure for additional details on the fields above.

    list Boolean
    Should List permissions be enabled for this SAS?
    process Boolean
    Should Process permissions be enabled for this SAS?
    read Boolean
    Should Read permissions be enabled for this SAS?
    tag Boolean
    Should Get / Set Index Tags permissions be enabled for this SAS?
    update Boolean
    Should Update permissions be enabled for this SAS?
    write Boolean
    Should Write permissions be enabled for this SAS?

    GetAccountSASResourceTypes

    Container bool
    Should permission be granted to the container?
    Object bool
    Should permission be granted only to a specific object?
    Service bool
    Should permission be granted to the entire service?
    Container bool
    Should permission be granted to the container?
    Object bool
    Should permission be granted only to a specific object?
    Service bool
    Should permission be granted to the entire service?
    container Boolean
    Should permission be granted to the container?
    object Boolean
    Should permission be granted only to a specific object?
    service Boolean
    Should permission be granted to the entire service?
    container boolean
    Should permission be granted to the container?
    object boolean
    Should permission be granted only to a specific object?
    service boolean
    Should permission be granted to the entire service?
    container bool
    Should permission be granted to the container?
    object bool
    Should permission be granted only to a specific object?
    service bool
    Should permission be granted to the entire service?
    container Boolean
    Should permission be granted to the container?
    object Boolean
    Should permission be granted only to a specific object?
    service Boolean
    Should permission be granted to the entire service?

    GetAccountSASServices

    Blob bool
    Should permission be granted to blob services within this storage account?
    File bool
    Should permission be granted to file services within this storage account?
    Queue bool
    Should permission be granted to queue services within this storage account?
    Table bool
    Should permission be granted to table services within this storage account?
    Blob bool
    Should permission be granted to blob services within this storage account?
    File bool
    Should permission be granted to file services within this storage account?
    Queue bool
    Should permission be granted to queue services within this storage account?
    Table bool
    Should permission be granted to table services within this storage account?
    blob Boolean
    Should permission be granted to blob services within this storage account?
    file Boolean
    Should permission be granted to file services within this storage account?
    queue Boolean
    Should permission be granted to queue services within this storage account?
    table Boolean
    Should permission be granted to table services within this storage account?
    blob boolean
    Should permission be granted to blob services within this storage account?
    file boolean
    Should permission be granted to file services within this storage account?
    queue boolean
    Should permission be granted to queue services within this storage account?
    table boolean
    Should permission be granted to table services within this storage account?
    blob bool
    Should permission be granted to blob services within this storage account?
    file bool
    Should permission be granted to file services within this storage account?
    queue bool
    Should permission be granted to queue services within this storage account?
    table bool
    Should permission be granted to table services within this storage account?
    blob Boolean
    Should permission be granted to blob services within this storage account?
    file Boolean
    Should permission be granted to file services within this storage account?
    queue Boolean
    Should permission be granted to queue services within this storage account?
    table Boolean
    Should permission be granted to table services within this storage account?

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Azure v6.10.0 published on Tuesday, Nov 19, 2024 by Pulumi