Support for prefix-scoped access for User Delegation
SAS for Azure Blob Storage is generally available in all
Azure regions. SAS tokens for Blob Storage have historically supported
two levels of scope: container and individual blob. With this release, you can
now scope access to a prefix or virtual directory within
a container, granting access to all blobs beneath the path.
This is especially valuable for applications that organize
data by tenant, workspace, project, or department within a shared
container. Instead of granting access to an entire container or
generating many blob-level tokens, you can now issue a single SAS token scoped
to a set of blobs through a prefix.
Prefix-scoped access is supported for both Blob and Data
Lake storage accounts.
Learn
more: