Skip to content

Commit ef19c91

Browse files
committedMay 27, 2022
resolve merge conflicts
1 parent 3758743 commit ef19c91

File tree

2 files changed

+10
-68
lines changed

2 files changed

+10
-68
lines changed
 

‎articles/cognitive-services/Translator/document-translation/create-sas-tokens.md

+6-64
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.date: 05/25/2022
1010

1111
# Create SAS tokens for your storage containers
1212

13-
In this article, you'll learn how to create user delegation, shared access signature (SAS) tokens, using Azure Storage Explorer or the Azure portal. User delegation SAS tokens are secured with Azure AD credentials. SAS tokens provide secure, delegated access to resources in your Azure storage account.
13+
In this article, you'll learn how to create user delegation, shared access signature (SAS) tokens, using the Azure portal or Azure Storage Explorer. User delegation SAS tokens are secured with Azure AD credentials. SAS tokens provide secure, delegated access to resources in your Azure storage account.
1414

1515
At a high level, here's how SAS tokens work:
1616

@@ -49,8 +49,6 @@ To get started, you'll need the following resources:
4949

5050
<!-- markdownlint-disable MD024 -->
5151

52-
### Create your tokens
53-
5452
Go to the [Azure portal](https://portal.azure.com/#home) and navigate to your container or file:
5553

5654
| Create SAS for a container| Create SAS for a specific file|
@@ -82,15 +80,13 @@ Continue as follows:
8280

8381
1. To construct a SAS URL, append the SAS token (URI) to the URL for a storage service.
8482

85-
## Azure Storage Explorer
83+
## Create SAS tokens in Azure Storage Explorer
8684

8785
Azure Storage Explorer is a free standalone app that enables you to easily manage your Azure cloud storage resources from your desktop.
8886

8987
* You'll need the [**Azure Storage Explorer**](../../../vs-azure-tools-storage-manage-with-storage-explorer.md) app installed in your Windows, macOS, or Linux development environment.
9088

91-
* After the Azure Storage Explorer app is installed, [connect it the storage account](../../../vs-azure-tools-storage-manage-with-storage-explorer.md?tabs=windows#connect-to-a-storage-account-or-service) you're using for Document Translation.
92-
93-
### Create your tokens
89+
* After the Azure Storage Explorer app is installed, [connect it the storage account](../../../vs-azure-tools-storage-manage-with-storage-explorer.md?tabs=windows#connect-to-a-storage-account-or-service) you're using for Document Translation. Follow the steps below to create tokens for a storage container or specific blob file:
9490

9591
### [SAS tokens for storage containers](#tab/Containers)
9692

@@ -107,27 +103,8 @@ Azure Storage Explorer is a free standalone app that enables you to easily manag
107103

108104
1. A new window will appear with the **Container** name, **URI**, and **Query string** for your container.
109105
1. **Copy and paste the container, URI, and query string values in a secure location. They'll only be displayed once and can't be retrieved once the window is closed.**
110-
1. To use your SAS URL in REST API requests, use the SAS URL as your sourceURL and targetURL values (or append the SAS query string to your existing sourceURL and targetURL values):
111-
112-
```json
113-
{
114-
"inputs": [
115-
{
116-
"source": {
117-
"sourceUrl": "https://my.blob.core.windows.net/source-en?sv=2019-12-12&st=2021-03-05T17%3A45%3A25Z&se=2021-03-13T17%3A45%3A00Z&sr=c&sp=rl&sig=SDRPMjE4nfrH3csmKLILkT%2Fv3e0Q6SWpssuuQl1NmfM%3D"
118-
},
119-
"targets": [
120-
{
121-
"targetUrl": "https://my.blob.core.windows.net/target-fr?sv=2019-12-12&st=2021-03-05T17%3A49%3A02Z&se=2021-03-13T17%3A49%3A00Z&sr=c&sp=wdl&sig=Sq%2BYdNbhgbq4hLT0o1UUOsTnQJFU590sWYo4BOhhQhs%3D",
122-
"language": "fr"
123-
}
124-
]
125-
}
126-
]
127-
}
128-
```
129106

130-
### [SAS tokens for blobs](#tab/blobs)
107+
### [SAS tokens for blob file](#tab/blobs)
131108

132109
1. Open the Azure Storage Explorer app on your local machine and navigate to your connected **Storage Accounts**.
133110
1. Expand your storage node and select **Blob Containers**.
@@ -150,26 +127,9 @@ Azure Storage Explorer is a free standalone app that enables you to easily manag
150127

151128
---
152129

153-
## Azure portal
154-
155-
<!-- markdownlint-disable MD024 -->
156-
### Prerequisites
157-
158-
To get started, you'll need:
130+
### Use your SAS URL
159131

160-
* An active [**Azure account**](https://azure.microsoft.com/free/cognitive-services/). If you don't have one, you can [**create a free account**](https://azure.microsoft.com/free/).
161-
* A [**Translator**](https://portal.azure.com/#create/Microsoft) service resource (**not** a Cognitive Services multi-service resource. *See* [Create a new Azure resource](../../cognitive-services-apis-create-account.md#create-a-new-azure-cognitive-services-resource).
162-
* An [**Azure Blob Storage account**](https://portal.azure.com/#create/Microsoft.StorageAccount-ARM). You'll create containers to store and organize your blob data within your storage account.
163-
164-
### Create your tokens
165-
166-
Go to the [Azure portal](https://portal.azure.com/#home) and navigate as follows:
167-
168-
**Your storage account****containers****your container****your blob**
169-
170-
1. A new window will appear with the **Blob** name, **URI**, and **Query string** for your file.
171-
1. **Copy and paste the SAS URL and query string values in a secure location. They will only be displayed once and cannot be retrieved once the window is closed.**
172-
1. To use your SAS URL in REST API requests, use the SAS URL as your sourceURL and targetURL values (or append the SAS query string to your existing sourceURL and targetURL values):
132+
* To use your SAS URL in REST API requests, use the SAS URL as your sourceURL and targetURL values (or append the SAS query string to your existing sourceURL and targetURL values):
173133

174134
```json
175135
{
@@ -194,24 +154,6 @@ Go to the [Azure portal](https://portal.azure.com/#home) and navigate as follows
194154
}
195155
```
196156

197-
1. Select **Signing method****User delegation key**.
198-
199-
1. Define **Permissions** by checking and/or clearing the appropriate check box.
200-
201-
1. Specify the signed key **Start** and **Expiry** times.
202-
203-
1. The **Allowed IP addresses** field is optional and specifies an IP address or a range of IP addresses from which to accept requests. If the request IP address doesn't match the IP address or address range specified on the SAS token, it won't be authorized.
204-
205-
1. The **Allowed protocols** field is optional and specifies the protocol permitted for a request made with the SAS. The default value is HTTPS.
206-
207-
1. Review then select **Generate SAS token and URL**.
208-
209-
1. The **Blob SAS token** query string and **Blob SAS URL** will be displayed in the lower area of window.
210-
211-
1. **Copy and paste the Blob SAS token and URL values in a secure location. They'll only be displayed once and cannot be retrieved once the window is closed.**
212-
213-
1. To construct a SAS URL, append the SAS token (URI) to the URL for a storage service.
214-
215157
That's it! You've learned how to create SAS tokens to authorize how clients access your data.
216158

217159
## Learn more

‎articles/sentinel/watchlists-create.md

+4-4
Original file line numberDiff line numberDiff line change
@@ -101,14 +101,14 @@ For more information about shared access signatures, see [Azure Storage shared a
101101

102102
To upload a large watchlist file to your Azure Storage account, use AzCopy or the Azure portal.
103103

104-
1. If you dont already have an Azure Storage account, [create a storage account](../storage/common/storage-account-create.md). The storage account can be in a different resource group or region from your workspace in Microsoft Sentinel.
104+
1. If you don't already have an Azure Storage account, [create a storage account](../storage/common/storage-account-create.md). The storage account can be in a different resource group or region from your workspace in Microsoft Sentinel.
105105
1. Use either AzCopy or the Azure portal to upload your csv file with your watchlist data into the storage account.
106106

107107
#### Upload your file with AzCopy
108108

109109
Upload files and directories to Blob storage by using the AzCopy v10 command-line utility. To learn more, see [Upload files to Azure Blob storage by using AzCopy](../storage/common/storage-use-azcopy-blobs-upload.md).
110110

111-
1. If you dont already have a storage container, create one by running the following command.
111+
1. If you don't already have a storage container, create one by running the following command.
112112

113113
```azcopy
114114
azcopy make
@@ -125,14 +125,14 @@ Upload files and directories to Blob storage by using the AzCopy v10 command-lin
125125

126126
If you don't use AzCopy, upload your file by using the Azure portal. Go to your storage account in Azure portal to upload the csv file with your watchlist data.
127127

128-
1. If you dont already have an existing storage container, [create a container](../storage/blobs/storage-quickstart-blobs-portal.md#create-a-container). For the level of public access to the container, we recommend the default which is that the level is set to Private (no anonymous access).
128+
1. If you don't already have an existing storage container, [create a container](../storage/blobs/storage-quickstart-blobs-portal.md#create-a-container). For the level of public access to the container, we recommend the default which is that the level is set to Private (no anonymous access).
129129
1. Upload your csv file to the storage account by [uploading a block blob](../storage/blobs/storage-quickstart-blobs-portal.md#upload-a-block-blob).
130130

131131
### Step 2: Create shared access signature URL
132132

133133
Create a shared access signature URL for Microsoft Sentinel to retrieve the watchlist data.
134134

135-
1. Follow the steps in [Create SAS tokens for blobs in the Azure portal](../cognitive-services/translator/document-translation/create-sas-tokens.md?tabs=blobs#create-sas-tokens-for-blobs-in-the-azure-portal).
135+
1. Follow the steps in [Create SAS tokens for blobs in the Azure portal](../cognitive-services/translator/document-translation/create-sas-tokens.md?tabs=blobs#create-sas-tokens-in-the-azure-portal).
136136
1. Set the shared access signature token expiry time to be at minimum 6 hours.
137137
1. Copy the value for **Blob SAS URL**.
138138

0 commit comments

Comments
 (0)
Please sign in to comment.