Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

generate-sas creates SAS without t after ss= even though I specified table service in --services

See original GitHub issue

I tried to use generate-sas to create a SAS link with access to table service. But the created SAS token doesn’t have t after ss==. It seems to intentionally ignore the request. The same command line works fine on my windows box with azure-cli(2.0.0). Is it a regression?

 az storage account generate-sas --account-name ubuntudiagnostic --expiry 2018-12-31T23:59Z --permissions wlacurdp --resource-types sco --services bfqt -o tsv --verbose
se=2018-12-31T23%3A59Z&sp=rwdlacup&sv=2017-04-17&**ss=bqf**&srt=sco&sig=<remove signature intentionally>

Environment summary

azure-cli (2.0.20)

acr (2.0.14) acs (2.0.18) appservice (0.1.19) backup (1.0.2) batch (3.1.6) batchai (0.1.2) billing (0.1.6) cdn (0.0.10) cloud (2.0.9) cognitiveservices (0.1.9) command-modules-nspkg (2.0.1) component (2.0.8) configure (2.0.12) consumption (0.1.6) container (0.1.12) core (2.0.20) cosmosdb (0.1.14) dla (0.0.13) dls (0.0.16) eventgrid (0.1.5) extension (0.0.5) feedback (2.0.6) find (0.2.7) interactive (0.3.11) iot (0.1.13) keyvault (2.0.13) lab (0.0.12) monitor (0.0.11) network (2.0.17) nspkg (3.0.1) profile (2.0.15) rdbms (0.0.8) redis (0.2.10) resource (2.0.17) role (2.0.14) servicefabric (0.0.5) sql (2.0.14) storage (2.0.18) vm (2.0.17)

Python location ‘/opt/az/bin/python3’ Extensions directory ‘/home/fliang/.azure/cliextensions’

Python (Linux) 3.6.1 (default, Oct 18 2017, 20:41:18) [GCC 4.8.4]

Legal docs and information: aka.ms/AzureCliLegal

Issue Analytics

State:
Created 6 years ago
Comments:9 (6 by maintainers)

Top GitHub Comments

2reactions

troydaicommented, Nov 3, 2017

Table service is being moved out of azure storage and integrating with CosmosDB service. Therefore the table will not fall under the storage service’s SAS token anymore. We kept the command structure to avoid breaking change in short-term.

To generate a SAS for table service please use az storage table generate-sas command.

1reaction

troydaicommented, Apr 3, 2018

Thanks for the confirmation. It has been fixed.

Top Results From Across the Web

Create a service SAS - Azure Storage | Microsoft Learn

A service shared access signature (SAS) delegates access to a resource in Azure Blob Storage, Azure Queue Storage, Azure Table Storage, ...

SAS® Data Integration Studio 4.904: User's Guide

Using a DataFlux Data Service in a SAS Data Integration Studio Job . ... Using the Cloud Analytic Services Table Loader Transformation ....

Azure - Securing Shared Access Signatures (SAS)

The example shows that an account-level SAS token can be used to access blobs and containers, however if the SignedServices is over permissive, ......

Azure Storage Account : Blob service (SAS ... - Stack Overflow

I faced a similar issue, seems like by default Allowed resource types option is unchecked. Select any one option and the Generate SAS...

Azure SAS Tokens for Web Application Penetration Testers

For example, ss=bf allows access to the Blob and File services. If multiple values are specified for the ss parameter, be sure to...