Intro to Shared Access Signature (SAS) tokens

Allie Cliffe

If you're interested in using Terra on Azure, please email terra-enterprise@broadinstitute.org.

Introduction to Shared Access Signature (SAS) Tokens

Shared Access Signature (SAS) Tokens are used in Azure to access storage containers’ blobs. The dashboard of your Terra on Azure workspace generates a SAS token that you can use to read from and write to your workspace blob storage container (“Storage SAS URL”).

The SAS token in the workspace Dashboard Cloud Information section
Screenshot of SAS token in Cloud Information section at right in the Dashboard of Terra on Azure workspace

 

SAS token caveats

  • The tokens available in your dashboard expire after eight hours.
  • You can use multiple valid tokens concurrently.
  • Warning: You should not share your SAS token with others.

The blob storage container URL has the format: https://{unique-identifier}.blob.core.windows.net/sc-{terra-workspace-ID}

The storage SAS URL includes both the storage container and an appended temporary SAS token after the ? symbol. 

Example SAS URL

https://{unique-identifier}.blob.core.windows.net/sc-{terra-workspace-ID}?
sv=2021-06-08&spr=https&st=2022-11-17T20%3A07%3A28Z&se=2022-1118
T04%3A22%3A28Z&sr=c&sp=racwdl&sig=t7ny7DbPxaPVkwgvihnWdIOZkqtdl5djCIA%2BvaNoNY4%3D

Screenshot of Cloud Information section of Terra on Azure workspace with copy-SAS-token-to-clipboard icon highlighted

Was this article helpful?

0 out of 0 found this helpful

Comments

3 comments

Please sign in to leave a comment.