I have created Azure Storage account, inside storage account created container and uploaded files to my container.
When I tried to access the Container from browser. Getting: This request is not authorized to perform this operation. ,Assigned Storage blob Contributer and also Storage Blob Owner but same issue.
2
Answers
I tried to reproduce the same in my environment to access the blob Storage. As I got below
I created storage account with container, like below.
Azure Portal > Storage accounts > Create a Storage Account
**Container Creation: **
Azure Storage Account > Containers > Container >
Assigned Storage Blob Data Contributor to my storage account, Like below.
Azure Storage Account > Select your Storage Account > Access Control (IAM)> Add > Add role Assignment > Storage Blob Data Contributor.
My blob is accessible over the Public Internet
Those files/container are private, this means only authorised users can access to them. To access a particular file with your browser, you need to grant permissions to that file. One of many solutions is to use SAS token (Shared Access Signature). In resume, this will generate a url with a token and this url can be pasted in a browser to access the file.
SAS token can be configured at some levels:
One of the benefits (it has a lot more) of SAS token is that you can define an expiration policy for that SAS token, so it not be externally accesible for eternity.
You should configure Share Access Policies if those files have sensible content or block some paths to protect them from external access.
Please, refer to the official documentation for more info about SAS Token usage:
What is SAS
Grant limited access to Azure Storage resources using SAS