locked
Best practice to design a document repository system using azure storage? RRS feed

  • Question

  • I am developing a document solution using Azure.

    In my system I might store some huge files and they might be downloaded by users in random times.
    Is it a correct way to pass a SAS Token to users to download the file in Azure directly or we have to download those from storage blob to stream it?



    • Edited by Adam Aiken Friday, January 17, 2020 6:14 AM
    Wednesday, December 11, 2019 1:19 AM

Answers

  • Thanks for raising this question! We would recommended to use Azure Shared access signature. A shared access signature (SAS) provides secure delegated access to resources in your storage account without compromising the security of your data. With a SAS, you have granular control over how a client can access your data. You can control what resources the client may access, what permissions they have on those resources, and how long the SAS is valid, among other parameters.

    For more information on SAS, refer to this article 

    Additional information: You may also check the features and benefits of the Azure files  where you can mount to clients computer and provides the access. 

    Any Azure file share can be mounted by WindowsmacOS, and/or Linux with the industry standard Server Message Block (SMB) protocol or via the File REST API. With SMB, reads and writes to files on the share are made directly on the file share in Azure. To mount by a VM in Azure, the SMB client in the OS must support at least SMB 2.1. To mount on-premises, such as on a user's workstation, the SMB client supported by the workstation must support at least SMB 3.0 (with encryption). In addition to SMB, new applications or services may directly access the file share via File REST, which provides an easy and scalable application programming interface for software development

    Hope this helps! 

    Kindly let us know if the above helps or you need further assistance on this issue.
    ------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" and Upvote on the post that helps you, this can be beneficial to other community members.

    Wednesday, December 11, 2019 2:53 AM

All replies

  • Thanks for raising this question! We would recommended to use Azure Shared access signature. A shared access signature (SAS) provides secure delegated access to resources in your storage account without compromising the security of your data. With a SAS, you have granular control over how a client can access your data. You can control what resources the client may access, what permissions they have on those resources, and how long the SAS is valid, among other parameters.

    For more information on SAS, refer to this article 

    Additional information: You may also check the features and benefits of the Azure files  where you can mount to clients computer and provides the access. 

    Any Azure file share can be mounted by WindowsmacOS, and/or Linux with the industry standard Server Message Block (SMB) protocol or via the File REST API. With SMB, reads and writes to files on the share are made directly on the file share in Azure. To mount by a VM in Azure, the SMB client in the OS must support at least SMB 2.1. To mount on-premises, such as on a user's workstation, the SMB client supported by the workstation must support at least SMB 3.0 (with encryption). In addition to SMB, new applications or services may directly access the file share via File REST, which provides an easy and scalable application programming interface for software development

    Hope this helps! 

    Kindly let us know if the above helps or you need further assistance on this issue.
    ------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" and Upvote on the post that helps you, this can be beneficial to other community members.

    Wednesday, December 11, 2019 2:53 AM
  • Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

     Just checking in to see if the above answer helped. If this answers your query, do click “Mark as Answer” and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
    Monday, December 16, 2019 9:24 AM
  • Is there any update on the issue?

    If the suggested answer helped for your issue, do click on "Mark as Answer" and “Vote as Helpful” on the post that helps you, this can be beneficial to other community members.

    Monday, December 23, 2019 1:40 PM
  • @Adam Aiken Just checking in to see if the above answer helped. If this answers your query, do click “Mark as Answer” and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
    Thursday, January 2, 2020 8:36 AM