Skip to main content

Use SAS Token

Determines if AzCopy uses a SAS Token for access. This is the only supported authentication mechanism for AzCopy v.10. For legacy versions (5/8) it is possible to use an Account Key or a SAS Token.

For legacy AzCopy versions the generated command uses either the /DestSAS option (this setting enabled) or the /DestKey account-key option (this setting disabled). AzCopy v10 commands always authenticate with the SAS token appended to the destination URL, regardless of this setting.

When to Change This Setting​

Enable it when the storage account should be accessed with a SAS token instead of the account key: required before moving to AzCopy v10, and preferable wherever scoped, expiring credentials are wanted.

SettingInteraction
AzCopyVersionv10 always uses the SAS token
Azure Stage SAS TokenThe SAS token used for the staging storage account
Azure Stage Account KeyThe account key used by legacy versions when this setting is disabled

Notes​

  • This setting is part of the AzCopy settings category.
  • The default value for this setting is N.