May 2017
Intermediate to advanced
518 pages
10h 6m
English
In Azure, storage Access keys are used to authenticate applications that use external or internal interfaces to interact with Azure Storage. Example interactions are a REST API call or a simple net use of an SMB share.
When a Storage account is created, Azure generates two 512 bit Access keys. These keys are very important to the security of the Storage account, for this reason they must be kept safe all the time.
SAS are also created based on the Storage accounts Access keys. That means when the access key that a specific SAS is based on is regenerated, the SAS is invalid and has to be regenerated.
The reason that there are two Access keys in each Storage account is mainly high availability. As it's recommended, to regenerate ...