How can you securely provide access to an Azure storage account for a 3rd-party user for a specific period of time (e.g., 2 hours) without sharing the storage account key or creating an Azure AD account for them?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Create a Shared Access Signature (SAS) token with a specific expiration time

SAS tokens provide time-limited, scoped access to storage resources without revealing the master account keys....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioAzure Blob Storage

How can you securely provide access to an Azure storage account for a 3rd-party user for a specific period of time (e.g., 2 hours) without sharing the storage account key or creating an Azure AD account for them?

โœ“ Correct Answer & ExplanationAzure Blob Storage

Correct Answer

Create a Shared Access Signature (SAS) token with a specific expiration time

Why This Answer Is Correct

SAS tokens provide time-limited, scoped access to storage resources without revealing the master account keys.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure Blob Storage โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Azure Blob Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.