- In the Microsoft Azure portal, go to the storage account associated with the shared access signature (SAS) token and select Shared access signature.
- Select the required allowed services, allowed resource types, allowed permissions, start and expiry date/time, allowed IP addresses, preferred routing tier, and signing key.
- Select Generate SAS and connection string.The generated storage account SAS key appears under SAS Token.
- Copy the SAS key.
- Go to the key vault you created in Create the Key Vault and select Secrets.
- Select Generate/Import.
- In the window Create a secret, provide these values:
Name Enter name of storage account. Secret value Paste copied SAS token. Set activation date Select to set activation date. Activation date If you selected Set activation date: Top left field: Enter activation date (m[m]/d[d]/yyyy).
Top right field: Enter activation time (h[h]/m[m]/s[s] {AM | PM}).
Lower field: Select time zone.
Set expiration date Select to set expiration date. Expiration date If you selected Set expiration date: Top left field: Enter expiration date (m[m]/d[d]/yyyy).
Top right field: Enter expiration time h[h]/m[m]/s[s] {AM | PM}).
Lower field: Select time zone.
Enabled Yes - Select Create.The SAS token of the storage account is now a secret in the key vault.