Skip to content

AZT701.2 - SAS URI Generation: Storage Account File Share SAS#

By generating a Shared Access Signature (SAS) URI, an adversary can access a container in a Storage Account at any time.

Resource

Azure Storage Account

Actions

  • Microsoft.Storage/storageAccounts/listAccountSas/action

Examples

az storage blob generate-sas

blobsas

Detections

No logs are created when creating a SAS URI in an Azure Storage Account.

Additional Resources

https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview