Azure blob storage SAS

0
votes

How to grant temporary privileges to download one blob in Azure blob storage via a SAS, that has a duration equivalent to the period of time the download will take. i.e. privilege will be no longer than necessary?

1
azureazure-storage-blobs
There will be a charge every time a client downloads the blob, what if user downloads 10 times? – Llew

1 Answers

1
votes

This isn't possible by design, you can grant a short lived SAS token (e.g. 1 minute) but if the client is on a slow internet connection that could be a problem. What is the problem if the client downloads the blob multiple times? sometimes a user "loses" a file and redownloads the same file. Why do you want this?

If the download is handled by an application, you could use a stored access policy, and after the client succesfully downloads the file, removes the policy so the SAS is revoked: https://azure.microsoft.com/nl-nl/documentation/articles/storage-dotnet-shared-access-signature-part-1/