Exam AZ-500 topic 4 question 90 discussion

SAS1: folder1 KEY1: container1, folder1, table1 https://stackoverflow.com/questions/43446426/relationship-between-azure-sas-allowed-services-and-allowed-resource-types Don't think of a container mentioned there as blob container. Think of it as something that will have child elements (objects in this case). In context of blobs, container will refer to blob container which will contain blobs. In context of file service, container will refer to share which will contain files & directories. In context of table service, container will refer to table which will contain entities. In context of queue service, container will refer to queue which will contain messages.

the discussions are so confusing

Box1 - Folder1 only. ("Containers" in the context of Files refers to file shares, NOT blob containers like "container1"). Box 2 - Everything (it's the storage account key)

Did anyone notice that table service is not allowed? In that case the only answer that makes sense to me is: Box1: Container and Folder1 Box2: Container and Folder1

Explanation: SAS1: folder1 KEY1: container1, folder1, table1 Don't think of a container mentioned there as blob container. Think of it as something that will have child elements (objects in this case). In context of blobs, container will refer to blob container which will contain blobs. In context of file service, container will refer to share which will contain files & directories. In context of table service, container will refer to table which will contain entities. In context of queue service, container will refer to queue which will contain messages. Reference: https://stackoverflow.com/questions/43446426/relationship-between-azure-sas-allowed-services-andallowed- resource-types

SAS1: folder1 KEY1: container1, folder1, table1 Don't think of a container mentioned there as blob container. Think of it as something that will have child elements (objects in this case). In context of blobs, container will refer to blob container which will contain blobs. In context of file service, container will refer to share which will contain files & directories. In context of table service, container will refer to table which will contain entities. In context of queue service, container will refer to queue which will contain messages.

Tested in the lab SAS will only allow folder access no container access Key will allow all 3 access

SAS1: folder 1 (not testing your English here so not container) KEY1: container1, folder1 and table1

SAS1: folder only Key1: container1, folder1 and table1 https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage?tabs=azure-portal#protect-your-access-keys Storage account access keys provide full access to the configuration of a storage account, as well as the data. Always be careful to protect your access keys.

SAS1: Container and folder1 KEY1: Container1, folder1 and table1

Container gives the file share permissions to create/delete share

Box1: container and folder1 The allowed service is File only, and folder1 is file share. The allowed resources types are service, container and object. Box1: container and folder1 Both key1 and key2 are the signing keys of SAS1. https://social.msdn.microsoft.com/Forums/en-US/150b5a5d-0a0c-49a6-8ec6-265535789e0b/signing-key-under-shared-access-signature?forum=windowsazuredata

Foe SAS1 - only allowed services are files - hence it can only do operation on FOLDER1