1. Packages
  2. Packages
  3. Azure Classic
  4. API Docs
  5. storage
  6. getAccountBlobContainerSAS

We recommend using Azure Native.

Viewing docs for Azure v6.35.0
published on Tuesday, Apr 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-azure

azure.storage.getAccountBlobContainerSAS

azure logo

We recommend using Azure Native.

Viewing docs for Azure v6.35.0
published on Tuesday, Apr 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-azure

    Use this data source to obtain a Shared Access Signature (SAS Token) for an existing Storage Account Blob Container.

    Shared access signatures allow fine-grained, ephemeral access control to various aspects of an Azure Storage Account Blob Container.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const rg = new azure.core.ResourceGroup("rg", {
    name: "resourceGroupName",
    location: "West Europe",
});
const storage = new azure.storage.Account("storage", {
    name: "storageaccountname",
    resourceGroupName: rg.name,
    location: rg.location,
    accountTier: "Standard",
    accountReplicationType: "LRS",
});
const container = new azure.storage.Container("container", {
    name: "mycontainer",
    storageAccountName: storage.name,
    containerAccessType: "private",
});
const example = azure.storage.getAccountBlobContainerSASOutput({
    connectionString: storage.primaryConnectionString,
    containerName: container.name,
    httpsOnly: true,
    ipAddress: "168.1.5.65",
    start: "2018-03-21",
    expiry: "2018-03-21",
    permissions: {
        read: true,
        add: true,
        create: false,
        write: false,
        "delete": true,
        list: true,
    },
    cacheControl: "max-age=5",
    contentDisposition: "inline",
    contentEncoding: "deflate",
    contentLanguage: "en-US",
    contentType: "application/json",
});
export const sasUrlQueryString = example.apply(example => example.sas);

    import pulumi
import pulumi_azure as azure

rg = azure.core.ResourceGroup("rg",
    name="resourceGroupName",
    location="West Europe")
storage = azure.storage.Account("storage",
    name="storageaccountname",
    resource_group_name=rg.name,
    location=rg.location,
    account_tier="Standard",
    account_replication_type="LRS")
container = azure.storage.Container("container",
    name="mycontainer",
    storage_account_name=storage.name,
    container_access_type="private")
example = azure.storage.get_account_blob_container_sas_output(connection_string=storage.primary_connection_string,
    container_name=container.name,
    https_only=True,
    ip_address="168.1.5.65",
    start="2018-03-21",
    expiry="2018-03-21",
    permissions={
        "read": True,
        "add": True,
        "create": False,
        "write": False,
        "delete": True,
        "list": True,
    },
    cache_control="max-age=5",
    content_disposition="inline",
    content_encoding="deflate",
    content_language="en-US",
    content_type="application/json")
pulumi.export("sasUrlQueryString", example.sas)

    package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/storage"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		rg, err := core.NewResourceGroup(ctx, "rg", &core.ResourceGroupArgs{
			Name:     pulumi.String("resourceGroupName"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		storage, err := storage.NewAccount(ctx, "storage", &storage.AccountArgs{
			Name:                   pulumi.String("storageaccountname"),
			ResourceGroupName:      rg.Name,
			Location:               rg.Location,
			AccountTier:            pulumi.String("Standard"),
			AccountReplicationType: pulumi.String("LRS"),
		})
		if err != nil {
			return err
		}
		container, err := storage.NewContainer(ctx, "container", &storage.ContainerArgs{
			Name:                pulumi.String("mycontainer"),
			StorageAccountName:  storage.Name,
			ContainerAccessType: pulumi.String("private"),
		})
		if err != nil {
			return err
		}
		example := storage.GetAccountBlobContainerSASOutput(ctx, storage.GetAccountBlobContainerSASOutputArgs{
			ConnectionString: storage.PrimaryConnectionString,
			ContainerName:    container.Name,
			HttpsOnly:        pulumi.Bool(true),
			IpAddress:        pulumi.String("168.1.5.65"),
			Start:            pulumi.String("2018-03-21"),
			Expiry:           pulumi.String("2018-03-21"),
			Permissions: &storage.GetAccountBlobContainerSASPermissionsArgs{
				Read:   pulumi.Bool(true),
				Add:    pulumi.Bool(true),
				Create: pulumi.Bool(false),
				Write:  pulumi.Bool(false),
				Delete: pulumi.Bool(true),
				List:   pulumi.Bool(true),
			},
			CacheControl:       pulumi.String("max-age=5"),
			ContentDisposition: pulumi.String("inline"),
			ContentEncoding:    pulumi.String("deflate"),
			ContentLanguage:    pulumi.String("en-US"),
			ContentType:        pulumi.String("application/json"),
		}, nil)
		ctx.Export("sasUrlQueryString", example.ApplyT(func(example storage.GetAccountBlobContainerSASResult) (*string, error) {
			return &example.Sas, nil
		}).(pulumi.StringPtrOutput))
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var rg = new Azure.Core.ResourceGroup("rg", new()
    {
        Name = "resourceGroupName",
        Location = "West Europe",
    });

    var storage = new Azure.Storage.Account("storage", new()
    {
        Name = "storageaccountname",
        ResourceGroupName = rg.Name,
        Location = rg.Location,
        AccountTier = "Standard",
        AccountReplicationType = "LRS",
    });

    var container = new Azure.Storage.Container("container", new()
    {
        Name = "mycontainer",
        StorageAccountName = storage.Name,
        ContainerAccessType = "private",
    });

    var example = Azure.Storage.GetAccountBlobContainerSAS.Invoke(new()
    {
        ConnectionString = storage.PrimaryConnectionString,
        ContainerName = container.Name,
        HttpsOnly = true,
        IpAddress = "168.1.5.65",
        Start = "2018-03-21",
        Expiry = "2018-03-21",
        Permissions = new Azure.Storage.Inputs.GetAccountBlobContainerSASPermissionsInputArgs
        {
            Read = true,
            Add = true,
            Create = false,
            Write = false,
            Delete = true,
            List = true,
        },
        CacheControl = "max-age=5",
        ContentDisposition = "inline",
        ContentEncoding = "deflate",
        ContentLanguage = "en-US",
        ContentType = "application/json",
    });

    return new Dictionary<string, object?>
    {
        ["sasUrlQueryString"] = example.Apply(getAccountBlobContainerSASResult => getAccountBlobContainerSASResult.Sas),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.storage.Account;
import com.pulumi.azure.storage.AccountArgs;
import com.pulumi.azure.storage.Container;
import com.pulumi.azure.storage.ContainerArgs;
import com.pulumi.azure.storage.StorageFunctions;
import com.pulumi.azure.storage.inputs.GetAccountBlobContainerSASArgs;
import com.pulumi.azure.storage.inputs.GetAccountBlobContainerSASPermissionsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var rg = new ResourceGroup("rg", ResourceGroupArgs.builder()
            .name("resourceGroupName")
            .location("West Europe")
            .build());

        var storage = new Account("storage", AccountArgs.builder()
            .name("storageaccountname")
            .resourceGroupName(rg.name())
            .location(rg.location())
            .accountTier("Standard")
            .accountReplicationType("LRS")
            .build());

        var container = new Container("container", ContainerArgs.builder()
            .name("mycontainer")
            .storageAccountName(storage.name())
            .containerAccessType("private")
            .build());

        final var example = StorageFunctions.getAccountBlobContainerSAS(GetAccountBlobContainerSASArgs.builder()
            .connectionString(storage.primaryConnectionString())
            .containerName(container.name())
            .httpsOnly(true)
            .ipAddress("168.1.5.65")
            .start("2018-03-21")
            .expiry("2018-03-21")
            .permissions(GetAccountBlobContainerSASPermissionsArgs.builder()
                .read(true)
                .add(true)
                .create(false)
                .write(false)
                .delete(true)
                .list(true)
                .build())
            .cacheControl("max-age=5")
            .contentDisposition("inline")
            .contentEncoding("deflate")
            .contentLanguage("en-US")
            .contentType("application/json")
            .build());

        ctx.export("sasUrlQueryString", example.applyValue(_example -> _example.sas()));
    }
}

    resources:
  rg:
    type: azure:core:ResourceGroup
    properties:
      name: resourceGroupName
      location: West Europe
  storage:
    type: azure:storage:Account
    properties:
      name: storageaccountname
      resourceGroupName: ${rg.name}
      location: ${rg.location}
      accountTier: Standard
      accountReplicationType: LRS
  container:
    type: azure:storage:Container
    properties:
      name: mycontainer
      storageAccountName: ${storage.name}
      containerAccessType: private
variables:
  example:
    fn::invoke:
      function: azure:storage:getAccountBlobContainerSAS
      arguments:
        connectionString: ${storage.primaryConnectionString}
        containerName: ${container.name}
        httpsOnly: true
        ipAddress: 168.1.5.65
        start: 2018-03-21
        expiry: 2018-03-21
        permissions:
          read: true
          add: true
          create: false
          write: false
          delete: true
          list: true
        cacheControl: max-age=5
        contentDisposition: inline
        contentEncoding: deflate
        contentLanguage: en-US
        contentType: application/json
outputs:
  sasUrlQueryString: ${example.sas}

    Using getAccountBlobContainerSAS

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAccountBlobContainerSAS(args: GetAccountBlobContainerSASArgs, opts?: InvokeOptions): Promise<GetAccountBlobContainerSASResult>
function getAccountBlobContainerSASOutput(args: GetAccountBlobContainerSASOutputArgs, opts?: InvokeOptions): Output<GetAccountBlobContainerSASResult>
    def get_account_blob_container_sas(cache_control: Optional[str] = None,
                                   connection_string: Optional[str] = None,
                                   container_name: Optional[str] = None,
                                   content_disposition: Optional[str] = None,
                                   content_encoding: Optional[str] = None,
                                   content_language: Optional[str] = None,
                                   content_type: Optional[str] = None,
                                   expiry: Optional[str] = None,
                                   https_only: Optional[bool] = None,
                                   ip_address: Optional[str] = None,
                                   permissions: Optional[GetAccountBlobContainerSASPermissions] = None,
                                   start: Optional[str] = None,
                                   opts: Optional[InvokeOptions] = None) -> GetAccountBlobContainerSASResult
def get_account_blob_container_sas_output(cache_control: pulumi.Input[Optional[str]] = None,
                                   connection_string: pulumi.Input[Optional[str]] = None,
                                   container_name: pulumi.Input[Optional[str]] = None,
                                   content_disposition: pulumi.Input[Optional[str]] = None,
                                   content_encoding: pulumi.Input[Optional[str]] = None,
                                   content_language: pulumi.Input[Optional[str]] = None,
                                   content_type: pulumi.Input[Optional[str]] = None,
                                   expiry: pulumi.Input[Optional[str]] = None,
                                   https_only: pulumi.Input[Optional[bool]] = None,
                                   ip_address: pulumi.Input[Optional[str]] = None,
                                   permissions: pulumi.Input[Optional[GetAccountBlobContainerSASPermissionsArgs]] = None,
                                   start: pulumi.Input[Optional[str]] = None,
                                   opts: Optional[InvokeOptions] = None) -> Output[GetAccountBlobContainerSASResult]
    func GetAccountBlobContainerSAS(ctx *Context, args *GetAccountBlobContainerSASArgs, opts ...InvokeOption) (*GetAccountBlobContainerSASResult, error)
func GetAccountBlobContainerSASOutput(ctx *Context, args *GetAccountBlobContainerSASOutputArgs, opts ...InvokeOption) GetAccountBlobContainerSASResultOutput

    > Note: This function is named GetAccountBlobContainerSAS in the Go SDK.

    public static class GetAccountBlobContainerSAS 
{
    public static Task<GetAccountBlobContainerSASResult> InvokeAsync(GetAccountBlobContainerSASArgs args, InvokeOptions? opts = null)
    public static Output<GetAccountBlobContainerSASResult> Invoke(GetAccountBlobContainerSASInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAccountBlobContainerSASResult> getAccountBlobContainerSAS(GetAccountBlobContainerSASArgs args, InvokeOptions options)
public static Output<GetAccountBlobContainerSASResult> getAccountBlobContainerSAS(GetAccountBlobContainerSASArgs args, InvokeOptions options)

    fn::invoke:
  function: azure:storage/getAccountBlobContainerSAS:getAccountBlobContainerSAS
  arguments:
    # arguments dictionary

    The following arguments are supported:

    ConnectionString string
    The connection string for the storage account to which this SAS applies. Typically directly from the primaryConnectionString attribute of an azure.storage.Account resource.
    ContainerName string
    Name of the container.
    Expiry string

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    Note: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    Start string
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    CacheControl string
    The Cache-Control response header that is sent when this SAS token is used.
    ContentDisposition string
    The Content-Disposition response header that is sent when this SAS token is used.
    ContentEncoding string
    The Content-Encoding response header that is sent when this SAS token is used.
    ContentLanguage string
    The Content-Language response header that is sent when this SAS token is used.
    ContentType string
    The Content-Type response header that is sent when this SAS token is used.
    HttpsOnly bool
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    IpAddress string
    Single IPv4 address or range (connected with a dash) of IPv4 addresses.
    Permissions GetAccountBlobContainerSASPermissions
    Should Permissions permissions be enabled for this SAS?
    ConnectionString string
    The connection string for the storage account to which this SAS applies. Typically directly from the primaryConnectionString attribute of an azure.storage.Account resource.
    ContainerName string
    Name of the container.
    Expiry string

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    Note: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    Start string
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    CacheControl string
    The Cache-Control response header that is sent when this SAS token is used.
    ContentDisposition string
    The Content-Disposition response header that is sent when this SAS token is used.
    ContentEncoding string
    The Content-Encoding response header that is sent when this SAS token is used.
    ContentLanguage string
    The Content-Language response header that is sent when this SAS token is used.
    ContentType string
    The Content-Type response header that is sent when this SAS token is used.
    HttpsOnly bool
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    IpAddress string
    Single IPv4 address or range (connected with a dash) of IPv4 addresses.
    Permissions GetAccountBlobContainerSASPermissions
    Should Permissions permissions be enabled for this SAS?
    connectionString String
    The connection string for the storage account to which this SAS applies. Typically directly from the primaryConnectionString attribute of an azure.storage.Account resource.
    containerName String
    Name of the container.
    expiry String

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    Note: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    start String
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    cacheControl String
    The Cache-Control response header that is sent when this SAS token is used.
    contentDisposition String
    The Content-Disposition response header that is sent when this SAS token is used.
    contentEncoding String
    The Content-Encoding response header that is sent when this SAS token is used.
    contentLanguage String
    The Content-Language response header that is sent when this SAS token is used.
    contentType String
    The Content-Type response header that is sent when this SAS token is used.
    httpsOnly Boolean
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ipAddress String
    Single IPv4 address or range (connected with a dash) of IPv4 addresses.
    permissions GetAccountBlobContainerSASPermissions
    Should Permissions permissions be enabled for this SAS?
    connectionString string
    The connection string for the storage account to which this SAS applies. Typically directly from the primaryConnectionString attribute of an azure.storage.Account resource.
    containerName string
    Name of the container.
    expiry string

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    Note: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    start string
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    cacheControl string
    The Cache-Control response header that is sent when this SAS token is used.
    contentDisposition string
    The Content-Disposition response header that is sent when this SAS token is used.
    contentEncoding string
    The Content-Encoding response header that is sent when this SAS token is used.
    contentLanguage string
    The Content-Language response header that is sent when this SAS token is used.
    contentType string
    The Content-Type response header that is sent when this SAS token is used.
    httpsOnly boolean
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ipAddress string
    Single IPv4 address or range (connected with a dash) of IPv4 addresses.
    permissions GetAccountBlobContainerSASPermissions
    Should Permissions permissions be enabled for this SAS?
    connection_string str
    The connection string for the storage account to which this SAS applies. Typically directly from the primaryConnectionString attribute of an azure.storage.Account resource.
    container_name str
    Name of the container.
    expiry str

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    Note: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    start str
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    cache_control str
    The Cache-Control response header that is sent when this SAS token is used.
    content_disposition str
    The Content-Disposition response header that is sent when this SAS token is used.
    content_encoding str
    The Content-Encoding response header that is sent when this SAS token is used.
    content_language str
    The Content-Language response header that is sent when this SAS token is used.
    content_type str
    The Content-Type response header that is sent when this SAS token is used.
    https_only bool
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ip_address str
    Single IPv4 address or range (connected with a dash) of IPv4 addresses.
    permissions GetAccountBlobContainerSASPermissions
    Should Permissions permissions be enabled for this SAS?
    connectionString String
    The connection string for the storage account to which this SAS applies. Typically directly from the primaryConnectionString attribute of an azure.storage.Account resource.
    containerName String
    Name of the container.
    expiry String

    The expiration time and date of this SAS. Must be a valid ISO-8601 format time/date string.

    Note: The ISO-8601 Time offset from UTC is currently not supported by the service, which will result into 409 error.

    start String
    The starting time and date of validity of this SAS. Must be a valid ISO-8601 format time/date string.
    cacheControl String
    The Cache-Control response header that is sent when this SAS token is used.
    contentDisposition String
    The Content-Disposition response header that is sent when this SAS token is used.
    contentEncoding String
    The Content-Encoding response header that is sent when this SAS token is used.
    contentLanguage String
    The Content-Language response header that is sent when this SAS token is used.
    contentType String
    The Content-Type response header that is sent when this SAS token is used.
    httpsOnly Boolean
    Only permit https access. If false, both http and https are permitted. Defaults to true.
    ipAddress String
    Single IPv4 address or range (connected with a dash) of IPv4 addresses.
    permissions Property Map
    Should Permissions permissions be enabled for this SAS?

    getAccountBlobContainerSAS Result

    The following output properties are available:

    ConnectionString string
    ContainerName string
    Expiry string
    Id string
    The provider-assigned unique ID for this managed resource.
    Sas string
    The computed Blob Container Shared Access Signature (SAS). The delimiter character ('?') for the query string is the prefix of sas.
    Start string
    CacheControl string
    ContentDisposition string
    ContentEncoding string
    ContentLanguage string
    ContentType string
    HttpsOnly bool
    IpAddress string
    Permissions GetAccountBlobContainerSASPermissions
    ConnectionString string
    ContainerName string
    Expiry string
    Id string
    The provider-assigned unique ID for this managed resource.
    Sas string
    The computed Blob Container Shared Access Signature (SAS). The delimiter character ('?') for the query string is the prefix of sas.
    Start string
    CacheControl string
    ContentDisposition string
    ContentEncoding string
    ContentLanguage string
    ContentType string
    HttpsOnly bool
    IpAddress string
    Permissions GetAccountBlobContainerSASPermissions
    connectionString String
    containerName String
    expiry String
    id String
    The provider-assigned unique ID for this managed resource.
    sas String
    The computed Blob Container Shared Access Signature (SAS). The delimiter character ('?') for the query string is the prefix of sas.
    start String
    cacheControl String
    contentDisposition String
    contentEncoding String
    contentLanguage String
    contentType String
    httpsOnly Boolean
    ipAddress String
    permissions GetAccountBlobContainerSASPermissions
    connectionString string
    containerName string
    expiry string
    id string
    The provider-assigned unique ID for this managed resource.
    sas string
    The computed Blob Container Shared Access Signature (SAS). The delimiter character ('?') for the query string is the prefix of sas.
    start string
    cacheControl string
    contentDisposition string
    contentEncoding string
    contentLanguage string
    contentType string
    httpsOnly boolean
    ipAddress string
    permissions GetAccountBlobContainerSASPermissions
    connection_string str
    container_name str
    expiry str
    id str
    The provider-assigned unique ID for this managed resource.
    sas str
    The computed Blob Container Shared Access Signature (SAS). The delimiter character ('?') for the query string is the prefix of sas.
    start str
    cache_control str
    content_disposition str
    content_encoding str
    content_language str
    content_type str
    https_only bool
    ip_address str
    permissions GetAccountBlobContainerSASPermissions
    connectionString String
    containerName String
    expiry String
    id String
    The provider-assigned unique ID for this managed resource.
    sas String
    The computed Blob Container Shared Access Signature (SAS). The delimiter character ('?') for the query string is the prefix of sas.
    start String
    cacheControl String
    contentDisposition String
    contentEncoding String
    contentLanguage String
    contentType String
    httpsOnly Boolean
    ipAddress String
    permissions Property Map

    Supporting Types

    GetAccountBlobContainerSASPermissions

    Add bool
    Should Add permissions be enabled for this SAS?
    Create bool
    Should Create permissions be enabled for this SAS?
    Delete bool
    Should Delete permissions be enabled for this SAS?
    DeleteVersion bool
    Should Delete version permissions be enabled for this SAS?
    Execute bool
    Should Execute permissions be enabled for this SAS?
    Find bool
    Should Find permissions be enabled for this SAS?
    List bool
    Should List permissions be enabled for this SAS?
    Move bool
    Should Move permissions be enabled for this SAS?
    Ownership bool
    Should Ownership permissions be enabled for this SAS?
    Permissions bool
    Should Permissions permissions be enabled for this SAS?
    Read bool
    Should Read permissions be enabled for this SAS?
    SetImmutabilityPolicy bool
    Should Set Immutability Policy permissions be enabled for this SAS?
    Tags bool
    Should Tags permissions be enabled for this SAS?
    Write bool

    Should Write permissions be enabled for this SAS?

    Note: Refer to the SAS creation reference from Azure for additional details on the fields above.

    Add bool
    Should Add permissions be enabled for this SAS?
    Create bool
    Should Create permissions be enabled for this SAS?
    Delete bool
    Should Delete permissions be enabled for this SAS?
    DeleteVersion bool
    Should Delete version permissions be enabled for this SAS?
    Execute bool
    Should Execute permissions be enabled for this SAS?
    Find bool
    Should Find permissions be enabled for this SAS?
    List bool
    Should List permissions be enabled for this SAS?
    Move bool
    Should Move permissions be enabled for this SAS?
    Ownership bool
    Should Ownership permissions be enabled for this SAS?
    Permissions bool
    Should Permissions permissions be enabled for this SAS?
    Read bool
    Should Read permissions be enabled for this SAS?
    SetImmutabilityPolicy bool
    Should Set Immutability Policy permissions be enabled for this SAS?
    Tags bool
    Should Tags permissions be enabled for this SAS?
    Write bool

    Should Write permissions be enabled for this SAS?

    Note: Refer to the SAS creation reference from Azure for additional details on the fields above.

    add Boolean
    Should Add permissions be enabled for this SAS?
    create Boolean
    Should Create permissions be enabled for this SAS?
    delete Boolean
    Should Delete permissions be enabled for this SAS?
    deleteVersion Boolean
    Should Delete version permissions be enabled for this SAS?
    execute Boolean
    Should Execute permissions be enabled for this SAS?
    find Boolean
    Should Find permissions be enabled for this SAS?
    list Boolean
    Should List permissions be enabled for this SAS?
    move Boolean
    Should Move permissions be enabled for this SAS?
    ownership Boolean
    Should Ownership permissions be enabled for this SAS?
    permissions Boolean
    Should Permissions permissions be enabled for this SAS?
    read Boolean
    Should Read permissions be enabled for this SAS?
    setImmutabilityPolicy Boolean
    Should Set Immutability Policy permissions be enabled for this SAS?
    tags Boolean
    Should Tags permissions be enabled for this SAS?
    write Boolean

    Should Write permissions be enabled for this SAS?

    Note: Refer to the SAS creation reference from Azure for additional details on the fields above.

    add boolean
    Should Add permissions be enabled for this SAS?
    create boolean
    Should Create permissions be enabled for this SAS?
    delete boolean
    Should Delete permissions be enabled for this SAS?
    deleteVersion boolean
    Should Delete version permissions be enabled for this SAS?
    execute boolean
    Should Execute permissions be enabled for this SAS?
    find boolean
    Should Find permissions be enabled for this SAS?
    list boolean
    Should List permissions be enabled for this SAS?
    move boolean
    Should Move permissions be enabled for this SAS?
    ownership boolean
    Should Ownership permissions be enabled for this SAS?
    permissions boolean
    Should Permissions permissions be enabled for this SAS?
    read boolean
    Should Read permissions be enabled for this SAS?
    setImmutabilityPolicy boolean
    Should Set Immutability Policy permissions be enabled for this SAS?
    tags boolean
    Should Tags permissions be enabled for this SAS?
    write boolean

    Should Write permissions be enabled for this SAS?

    Note: Refer to the SAS creation reference from Azure for additional details on the fields above.

    add bool
    Should Add permissions be enabled for this SAS?
    create bool
    Should Create permissions be enabled for this SAS?
    delete bool
    Should Delete permissions be enabled for this SAS?
    delete_version bool
    Should Delete version permissions be enabled for this SAS?
    execute bool
    Should Execute permissions be enabled for this SAS?
    find bool
    Should Find permissions be enabled for this SAS?
    list bool
    Should List permissions be enabled for this SAS?
    move bool
    Should Move permissions be enabled for this SAS?
    ownership bool
    Should Ownership permissions be enabled for this SAS?
    permissions bool
    Should Permissions permissions be enabled for this SAS?
    read bool
    Should Read permissions be enabled for this SAS?
    set_immutability_policy bool
    Should Set Immutability Policy permissions be enabled for this SAS?
    tags bool
    Should Tags permissions be enabled for this SAS?
    write bool

    Should Write permissions be enabled for this SAS?

    Note: Refer to the SAS creation reference from Azure for additional details on the fields above.

    add Boolean
    Should Add permissions be enabled for this SAS?
    create Boolean
    Should Create permissions be enabled for this SAS?
    delete Boolean
    Should Delete permissions be enabled for this SAS?
    deleteVersion Boolean
    Should Delete version permissions be enabled for this SAS?
    execute Boolean
    Should Execute permissions be enabled for this SAS?
    find Boolean
    Should Find permissions be enabled for this SAS?
    list Boolean
    Should List permissions be enabled for this SAS?
    move Boolean
    Should Move permissions be enabled for this SAS?
    ownership Boolean
    Should Ownership permissions be enabled for this SAS?
    permissions Boolean
    Should Permissions permissions be enabled for this SAS?
    read Boolean
    Should Read permissions be enabled for this SAS?
    setImmutabilityPolicy Boolean
    Should Set Immutability Policy permissions be enabled for this SAS?
    tags Boolean
    Should Tags permissions be enabled for this SAS?
    write Boolean

    Should Write permissions be enabled for this SAS?

    Note: Refer to the SAS creation reference from Azure for additional details on the fields above.

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Viewing docs for Azure v6.35.0
    published on Tuesday, Apr 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-azure
      Try Pulumi Cloud free. Your team will thank you.