Developing Solutions for Microsoft Azure (AZ-204) Practice Exam

When using Service SAS, what feature allows for more controlled access to a storage resource?

1. Setting expiration times

2. Limiting permissions with stored access policies

3. Using only HTTPS for transactions

4. Specifying IP address ranges

The correct answer is: Limiting permissions with stored access policies

The ability to limit permissions with stored access policies is a crucial feature of Service SAS that enables more controlled access to a storage resource. Stored access policies create a layer of abstraction that allows you to manage permissions associated with the SAS tokens more flexibly. When a stored access policy is created, it can specify permissions such as read, write, or delete actions and can also set constraints like a start time and expiration time for access. This means that you can adjust permissions or revoke access simply by modifying the policy, rather than having to regenerate SAS tokens individually. This flexibility is especially useful in scenarios where multiple clients or applications need to interact with the storage resource with varying levels of access. While setting expiration times, using only HTTPS, and specifying IP address ranges are important features that enhance security and control, they do not provide the same level of granularity and adjustability in managing access as stored access policies do. Thus, the ability to limit permissions through stored access policies stands out as the key feature for controlling access effectively.