Azure SharedAccess

Azure SharedAccess

Certified
Enterprise Edition

Generate a shared access signature (SAS) for an Azure blob

Creates a time-limited SAS token granting the requested permissions on the target blob.

yaml
type: io.kestra.plugin.ee.azure.storage.blob.SharedAccess

Generate a SAS token for a blob

yaml
id: azure_blob_sas
namespace: company.team

tasks:
  - id: sas
    type: io.kestra.plugin.ee.azure.storage.blob.SharedAccess
    endpoint: "https://yourstorage.blob.core.windows.net"
    connectionString: "{{ secret('AZURE_CONNECTION_STRING') }}"
    container: "mydata"
    name: "report.csv"
    expirationDate: "{{ now() | dateAdd(1, 'DAYS') }}"
    permissions:
      - READ
Properties

The blob container.

Service endpoint URL

Base HTTPS endpoint of the target service.

The time after which the SAS will no longer work

The full blob path on the container.

SubTypestring
Possible Values
READADDCREATEWRITEDELETEDELETE_VERSIONTAGSLISTMOVEEXECUTEFILTERIMMUTABILITY_POLICY

The permissions to be set for the Shared Access

Assets this task consumes as inputs or produces as outputs, for lineage tracking and the asset graph (Enterprise Edition). A flow declaring this property on a task is rejected in the open-source edition.

Definitions
assetFailureBehaviorstring
Possible Values
IGNOREFAILWARN

Asset failure behavior

Behavior applied to the task state when a declared asset fails to render, emit, or be persisted (e.g. a lock conflict): FAIL escalates it to FAILED, WARN (default) warns it if it would otherwise succeed, IGNORE leaves the state untouched.

enableAutobooleanstring

Whether to auto-register assets referenced dynamically at runtime that are not statically declared in inputs or outputs.

inputsarray

The assets consumed as inputs.

id*string
Min length1
typestring
outputs

The assets produced as outputs.

id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*string
Min length1

Custom asset type

descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150

Connection string of the Storage Account.

Shared Key access key for authenticating requests.

Shared Key account name for authenticating requests.

Formaturi

The SAS URI