GetAccountSAS

Use this data source to obtain a Shared Access Signature (SAS Token) for an existing Storage Account.

Shared access signatures allow fine-grained, ephemeral access control to various aspects of an Azure Storage Account.

Note that this is an Account SAS and not a Service SAS.

Using GetAccountSAS

function getAccountSAS(args: GetAccountSASArgs, opts?: InvokeOptions): Promise<GetAccountSASResult>

function  get_account_sas(connection_string=None, expiry=None, https_only=None, permissions=None, resource_types=None, services=None, start=None, opts=None)

func GetAccountSAS(ctx *Context, args *GetAccountSASArgs, opts ...InvokeOption) (*GetAccountSASResult, error)

public static class GetAccountSAS {
    public static Task<GetAccountSASResult> InvokeAsync(GetAccountSASArgs args, InvokeOptions? opts = null)
}

The following arguments are supported:

ConnectionString string: The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
Expiry string: The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.
Permissions GetAccountSASPermissionsArgs: A permissions block as defined below.
ResourceTypes GetAccountSASResourceTypesArgs: A resource_types block as defined below.
Services GetAccountSASServicesArgs: A services block as defined below.
Start string: The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
HttpsOnly bool: Only permit https access. If false, both http and https are permitted. Defaults to true.

ConnectionString string: The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
Expiry string: The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.
Permissions GetAccountSASPermissions: A permissions block as defined below.
ResourceTypes GetAccountSASResourceTypes: A resource_types block as defined below.
Services GetAccountSASServices: A services block as defined below.
Start string: The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
HttpsOnly bool: Only permit https access. If false, both http and https are permitted. Defaults to true.

connectionString string: The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
expiry string: The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.
permissions GetAccountSASPermissions: A permissions block as defined below.
resourceTypes GetAccountSASResourceTypes: A resource_types block as defined below.
services GetAccountSASServices: A services block as defined below.
start string: The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
httpsOnly boolean: Only permit https access. If false, both http and https are permitted. Defaults to true.

connection_string str: The connection string for the storage account to which this SAS applies. Typically directly from the primary_connection_string attribute of a azure.storage.Account resource.
expiry str: The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.
permissions Dict[GetAccountSASPermissions]: A permissions block as defined below.
resource_types Dict[GetAccountSASResourceTypes]: A resource_types block as defined below.
services Dict[GetAccountSASServices]: A services block as defined below.
start str: The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
https_only bool: Only permit https access. If false, both http and https are permitted. Defaults to true.

GetAccountSAS Result

The following output properties are available:

ConnectionString string
Expiry string
Id string: The provider-assigned unique ID for this managed resource.
Permissions GetAccountSASPermissions
ResourceTypes GetAccountSASResourceTypes
Sas string: The computed Account Shared Access Signature (SAS).
Services GetAccountSASServices
Start string
HttpsOnly bool

ConnectionString string
Expiry string
Id string: The provider-assigned unique ID for this managed resource.
Permissions GetAccountSASPermissions
ResourceTypes GetAccountSASResourceTypes
Sas string: The computed Account Shared Access Signature (SAS).
Services GetAccountSASServices
Start string
HttpsOnly bool

connectionString string
expiry string
id string: The provider-assigned unique ID for this managed resource.
permissions GetAccountSASPermissions
resourceTypes GetAccountSASResourceTypes
sas string: The computed Account Shared Access Signature (SAS).
services GetAccountSASServices
start string
httpsOnly boolean

connection_string str
expiry str
id str: The provider-assigned unique ID for this managed resource.
permissions Dict[GetAccountSASPermissions]
resource_types Dict[GetAccountSASResourceTypes]
sas str: The computed Account Shared Access Signature (SAS).
services Dict[GetAccountSASServices]
start str
https_only bool

Supporting Types

GetAccountSASPermissions

See the input and output API doc for this type.

Add bool: Should Add permissions be enabled for this SAS?
Create bool: Should Create permissions be enabled for this SAS?
Delete bool: Should Delete permissions be enabled for this SAS?
List bool: Should List permissions be enabled for this SAS?
Process bool: Should Process permissions be enabled for this SAS?
Read bool: Should Read permissions be enabled for this SAS?
Update bool: Should Update permissions be enabled for this SAS?
Write bool: Should Write permissions be enabled for this SAS?

Add bool: Should Add permissions be enabled for this SAS?
Create bool: Should Create permissions be enabled for this SAS?
Delete bool: Should Delete permissions be enabled for this SAS?
List bool: Should List permissions be enabled for this SAS?
Process bool: Should Process permissions be enabled for this SAS?
Read bool: Should Read permissions be enabled for this SAS?
Update bool: Should Update permissions be enabled for this SAS?
Write bool: Should Write permissions be enabled for this SAS?

add boolean: Should Add permissions be enabled for this SAS?
create boolean: Should Create permissions be enabled for this SAS?
delete boolean: Should Delete permissions be enabled for this SAS?
list boolean: Should List permissions be enabled for this SAS?
process boolean: Should Process permissions be enabled for this SAS?
read boolean: Should Read permissions be enabled for this SAS?
update boolean: Should Update permissions be enabled for this SAS?
write boolean: Should Write permissions be enabled for this SAS?

add bool: Should Add permissions be enabled for this SAS?
create bool: Should Create permissions be enabled for this SAS?
delete bool: Should Delete permissions be enabled for this SAS?
list bool: Should List permissions be enabled for this SAS?
process bool: Should Process permissions be enabled for this SAS?
read bool: Should Read permissions be enabled for this SAS?
update bool: Should Update permissions be enabled for this SAS?
write bool: Should Write permissions be enabled for this SAS?

GetAccountSASResourceTypes

See the input and output API doc for this type.

Container bool: Should permission be granted to the container?
Object bool: Should permission be granted only to a specific object?
Service bool: Should permission be granted to the entire service?

Container bool: Should permission be granted to the container?
Object bool: Should permission be granted only to a specific object?
Service bool: Should permission be granted to the entire service?

container boolean: Should permission be granted to the container?
object boolean: Should permission be granted only to a specific object?
service boolean: Should permission be granted to the entire service?

container bool: Should permission be granted to the container?
object bool: Should permission be granted only to a specific object?
service bool: Should permission be granted to the entire service?

GetAccountSASServices

See the input and output API doc for this type.

Blob bool: Should permission be granted to blob services within this storage account?
File bool: Should permission be granted to file services within this storage account?
Queue bool: Should permission be granted to queue services within this storage account?
Table bool: Should permission be granted to table services within this storage account?

Blob bool: Should permission be granted to blob services within this storage account?
File bool: Should permission be granted to file services within this storage account?
Queue bool: Should permission be granted to queue services within this storage account?
Table bool: Should permission be granted to table services within this storage account?

blob boolean: Should permission be granted to blob services within this storage account?
file boolean: Should permission be granted to file services within this storage account?
queue boolean: Should permission be granted to queue services within this storage account?
table boolean: Should permission be granted to table services within this storage account?

blob bool: Should permission be granted to blob services within this storage account?
file bool: Should permission be granted to file services within this storage account?
queue bool: Should permission be granted to queue services within this storage account?
table bool: Should permission be granted to table services within this storage account?

Package Details

Repository: https://github.com/pulumi/pulumi-azure
License: Apache-2.0
Notes: This Pulumi package is based on the azurerm Terraform Provider.

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud

GetAccountSAS

Using GetAccountSAS

GetAccountSAS Result

Supporting Types

GetAccountSASPermissions

GetAccountSASResourceTypes

GetAccountSASServices

Package Details

On This Page