SAS Token Service
The SAS Token Service issues short-lived Azure Storage SAS tokens for external customer applications and enforces tenant-scoped authorization before access is granted.
What it does
-
Returns least-privilege SAS authorization for a configured storage scope
-
Touchpoints:
-
API — Consume your tenant’s data through SAS Token Service’s APIs.
See also the corresponding API reference documentation
-
Why use it
-
Centralizes SAS token issuance for customer integrations
-
Keeps storage access tenant-specific and least-privilege by design
-
Produces machine-readable responses for success, denial, and dependency failure cases
| The SAS Token Service is designed for secure backend-to-backend storage access. It does not proxy resource content or expose a customer-facing UI. |