azure-storage-user-delegation-key
A user-delegation key can sign Blob SAS tokens for its validity window.
Where it sits
| location | BlobService getUserDelegationKey response.{SignedOid,SignedTid,SignedStart,SignedExpiry,SignedService,SignedVersion,Value} |
|---|
| location kind | output_value |
|---|
| data kinds | credential signing_secret |
|---|
| emits edge | ExposesCredential |
|---|
| service | Storage Accounts (Blob/File/Queue/Table) (azure:storage) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | Blob Service - Get User Delegation Key |
|---|
| response path | $value |
|---|
| encoding | xml |
|---|
| params | {"resource_id": "\u003cazure-resource-id\u003e"} |
|---|
Required permissions
Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action
References