Exam AI-100 topic 5 question 8 discussion

A. Yes, it does. Implementing Shared Access Signatures (SAS) on the storage account can help accomplish your objective of controlling access to the blob store based on a role. By using SAS, you can generate a token that includes specific permissions and a limited validity period. This token can be issued to users or clients with the required role. The role determines the permissions they have on the blob store. The SAS token can be attached to a request made to the storage account, granting temporary access to perform specific operations, such as read or write, on the blob store. With SAS, you have fine-grained control over who can access the blob store and what operations they can perform. By generating SAS tokens with different permissions for different roles, you can enforce access control based on the desired roles within your application.

For me is a NO because we can't store structured NoSQL data in a blob-storage, please be my guest to explain if that can be done, I didn't found that anywhere. https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

Even if there are contraints, I would vote for "Yes" because it allows to access to the blob storage : https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview