
Explanation:
Box 1: will be prompted for credentials
You can only access the storage account.
Allowed services: Blob
Allowed resource types: Blank [No resource type is allowed. No Service, No Container, No Object] Allowed IP addresses: Blank [This allows access from every IP address] Allowed permisions: Blank Box 2: will have no access Allowed services does not include File.
Note:
A Shared Access Signature (SAS) is a URI that grants limited access to Azure Storage resources, allowing you to delegate access without sharing your account key. SAS tokens can be configured to restrict access by IP address, protocol, and specific services.
Reference:
https://learn.microsoft.com/en-us/azure/ai-services/language-service/native-document-support/shared-access-signatures