What should you include in the recommendation?

You are developing an application that uses Azure Data Lake Storage Gen 2.

You need to recommend a solution to grant permissions to a specific application for a limited time period.

What should you include in the recommendation?
A . role assignments
B. account keys
C. shared access signatures (SAS)
D. Azure Active Directory (Azure AD) identities

View Answer

Answer: C

Explanation:

A shared access signature (SAS) provides secure delegated access to resources in your storage account. With a SAS, you have granular control over how a client can access your data.

For example:

What resources the client may access.

What permissions they have to those resources.

How long the SAS is valid.

Note: Data Lake Storage Gen2 supports the following authorization mechanisms:

✑ Shared Key authorization

✑ Shared access signature (SAS) authorization

✑ Role-based access control (Azure RBAC)

✑ Access control lists (ACL) Data Lake Storage Gen2 supports the following authorization mechanisms:

✑ Shared Key authorization

✑ Shared access signature (SAS) authorization

✑ Role-based access control (Azure RBAC)

✑ Access control lists (ACL)

Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview