Microsoft Azure Administrator Associate AZ-104 Practice Question

Creating a shared access signature (SAS) with a stored access policy on the blob container allows you to grant temporary access that can be revoked by modifying or deleting the policy. This method provides flexibility and control over access without impacting the storage account keys or requiring changes to each individual SAS token. Generating a SAS token without an associated stored access policy does not allow you to revoke the token once it's issued. Enabling anonymous access would make the container publicly accessible, which is insecure and does not meet the requirement of controlled, temporary access. Using Azure Key Vault manages keys but does not provide a mechanism for issuing and revoking SAS tokens for temporary access.