You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/cognitive-services/Translator/document-translation/create-sas-tokens.md
+6-64
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ ms.date: 05/25/2022
10
10
11
11
# Create SAS tokens for your storage containers
12
12
13
-
In this article, you'll learn how to create user delegation, shared access signature (SAS) tokens, using Azure Storage Explorer or the Azure portal. User delegation SAS tokens are secured with Azure AD credentials. SAS tokens provide secure, delegated access to resources in your Azure storage account.
13
+
In this article, you'll learn how to create user delegation, shared access signature (SAS) tokens, using the Azure portal or Azure Storage Explorer. User delegation SAS tokens are secured with Azure AD credentials. SAS tokens provide secure, delegated access to resources in your Azure storage account.
14
14
15
15
At a high level, here's how SAS tokens work:
16
16
@@ -49,8 +49,6 @@ To get started, you'll need the following resources:
49
49
50
50
<!-- markdownlint-disable MD024 -->
51
51
52
-
### Create your tokens
53
-
54
52
Go to the [Azure portal](https://portal.azure.com/#home) and navigate to your container or file:
55
53
56
54
| Create SAS for a container| Create SAS for a specific file|
@@ -82,15 +80,13 @@ Continue as follows:
82
80
83
81
1. To construct a SAS URL, append the SAS token (URI) to the URL for a storage service.
84
82
85
-
## Azure Storage Explorer
83
+
## Create SAS tokens in Azure Storage Explorer
86
84
87
85
Azure Storage Explorer is a free standalone app that enables you to easily manage your Azure cloud storage resources from your desktop.
88
86
89
87
* You'll need the [**Azure Storage Explorer**](../../../vs-azure-tools-storage-manage-with-storage-explorer.md) app installed in your Windows, macOS, or Linux development environment.
90
88
91
-
* After the Azure Storage Explorer app is installed, [connect it the storage account](../../../vs-azure-tools-storage-manage-with-storage-explorer.md?tabs=windows#connect-to-a-storage-account-or-service) you're using for Document Translation.
92
-
93
-
### Create your tokens
89
+
* After the Azure Storage Explorer app is installed, [connect it the storage account](../../../vs-azure-tools-storage-manage-with-storage-explorer.md?tabs=windows#connect-to-a-storage-account-or-service) you're using for Document Translation. Follow the steps below to create tokens for a storage container or specific blob file:
94
90
95
91
### [SAS tokens for storage containers](#tab/Containers)
96
92
@@ -107,27 +103,8 @@ Azure Storage Explorer is a free standalone app that enables you to easily manag
107
103
108
104
1. A new window will appear with the **Container** name, **URI**, and **Query string** for your container.
109
105
1.**Copy and paste the container, URI, and query string values in a secure location. They'll only be displayed once and can't be retrieved once the window is closed.**
110
-
1. To use your SAS URL in REST API requests, use the SAS URL as your sourceURL and targetURL values (or append the SAS query string to your existing sourceURL and targetURL values):
1. Open the Azure Storage Explorer app on your local machine and navigate to your connected **Storage Accounts**.
133
110
1. Expand your storage node and select **Blob Containers**.
@@ -150,26 +127,9 @@ Azure Storage Explorer is a free standalone app that enables you to easily manag
150
127
151
128
---
152
129
153
-
## Azure portal
154
-
155
-
<!-- markdownlint-disable MD024 -->
156
-
### Prerequisites
157
-
158
-
To get started, you'll need:
130
+
### Use your SAS URL
159
131
160
-
* An active [**Azure account**](https://azure.microsoft.com/free/cognitive-services/). If you don't have one, you can [**create a free account**](https://azure.microsoft.com/free/).
161
-
* A [**Translator**](https://portal.azure.com/#create/Microsoft) service resource (**not** a Cognitive Services multi-service resource. *See*[Create a new Azure resource](../../cognitive-services-apis-create-account.md#create-a-new-azure-cognitive-services-resource).
162
-
* An [**Azure Blob Storage account**](https://portal.azure.com/#create/Microsoft.StorageAccount-ARM). You'll create containers to store and organize your blob data within your storage account.
163
-
164
-
### Create your tokens
165
-
166
-
Go to the [Azure portal](https://portal.azure.com/#home) and navigate as follows:
1. A new window will appear with the **Blob** name, **URI**, and **Query string** for your file.
171
-
1.**Copy and paste the SAS URL and query string values in a secure location. They will only be displayed once and cannot be retrieved once the window is closed.**
172
-
1. To use your SAS URL in REST API requests, use the SAS URL as your sourceURL and targetURL values (or append the SAS query string to your existing sourceURL and targetURL values):
132
+
* To use your SAS URL in REST API requests, use the SAS URL as your sourceURL and targetURL values (or append the SAS query string to your existing sourceURL and targetURL values):
173
133
174
134
```json
175
135
{
@@ -194,24 +154,6 @@ Go to the [Azure portal](https://portal.azure.com/#home) and navigate as follows
1. Define **Permissions** by checking and/or clearing the appropriate check box.
200
-
201
-
1. Specify the signed key **Start** and **Expiry** times.
202
-
203
-
1. The **Allowed IP addresses** field is optional and specifies an IP address or a range of IP addresses from which to accept requests. If the request IP address doesn't match the IP address or address range specified on the SAS token, it won't be authorized.
204
-
205
-
1. The **Allowed protocols** field is optional and specifies the protocol permitted for a request made with the SAS. The default value is HTTPS.
206
-
207
-
1. Review then select **Generate SAS token and URL**.
208
-
209
-
1. The **Blob SAS token** query string and **Blob SAS URL** will be displayed in the lower area of window.
210
-
211
-
1.**Copy and paste the Blob SAS token and URL values in a secure location. They'll only be displayed once and cannot be retrieved once the window is closed.**
212
-
213
-
1. To construct a SAS URL, append the SAS token (URI) to the URL for a storage service.
214
-
215
157
That's it! You've learned how to create SAS tokens to authorize how clients access your data.
Copy file name to clipboardExpand all lines: articles/sentinel/watchlists-create.md
+4-4
Original file line number
Diff line number
Diff line change
@@ -101,14 +101,14 @@ For more information about shared access signatures, see [Azure Storage shared a
101
101
102
102
To upload a large watchlist file to your Azure Storage account, use AzCopy or the Azure portal.
103
103
104
-
1. If you don’t already have an Azure Storage account, [create a storage account](../storage/common/storage-account-create.md). The storage account can be in a different resource group or region from your workspace in Microsoft Sentinel.
104
+
1. If you don't already have an Azure Storage account, [create a storage account](../storage/common/storage-account-create.md). The storage account can be in a different resource group or region from your workspace in Microsoft Sentinel.
105
105
1. Use either AzCopy or the Azure portal to upload your csv file with your watchlist data into the storage account.
106
106
107
107
#### Upload your file with AzCopy
108
108
109
109
Upload files and directories to Blob storage by using the AzCopy v10 command-line utility. To learn more, see [Upload files to Azure Blob storage by using AzCopy](../storage/common/storage-use-azcopy-blobs-upload.md).
110
110
111
-
1. If you don’t already have a storage container, create one by running the following command.
111
+
1. If you don't already have a storage container, create one by running the following command.
112
112
113
113
```azcopy
114
114
azcopy make
@@ -125,14 +125,14 @@ Upload files and directories to Blob storage by using the AzCopy v10 command-lin
125
125
126
126
If you don't use AzCopy, upload your file by using the Azure portal. Go to your storage account in Azure portal to upload the csv file with your watchlist data.
127
127
128
-
1. If you don’t already have an existing storage container, [create a container](../storage/blobs/storage-quickstart-blobs-portal.md#create-a-container). For the level of public access to the container, we recommend the default which is that the level is set to Private (no anonymous access).
128
+
1. If you don't already have an existing storage container, [create a container](../storage/blobs/storage-quickstart-blobs-portal.md#create-a-container). For the level of public access to the container, we recommend the default which is that the level is set to Private (no anonymous access).
129
129
1. Upload your csv file to the storage account by [uploading a block blob](../storage/blobs/storage-quickstart-blobs-portal.md#upload-a-block-blob).
130
130
131
131
### Step 2: Create shared access signature URL
132
132
133
133
Create a shared access signature URL for Microsoft Sentinel to retrieve the watchlist data.
134
134
135
-
1. Follow the steps in [Create SAS tokens for blobs in the Azure portal](../cognitive-services/translator/document-translation/create-sas-tokens.md?tabs=blobs#create-sas-tokens-for-blobs-in-the-azure-portal).
135
+
1. Follow the steps in [Create SAS tokens for blobs in the Azure portal](../cognitive-services/translator/document-translation/create-sas-tokens.md?tabs=blobs#create-sas-tokens-in-the-azure-portal).
136
136
1. Set the shared access signature token expiry time to be at minimum 6 hours.
0 commit comments