A loch-side hostel QR code only needs to display one photo for fifteen minutes. How should the developer configure the SAS?
Select an answer to reveal the explanation.
Short Explanation
One photo, fifteen minutes—read on that blob, short fuse, done. Handing out write on the whole account for a QR code is pure overkill.
Full Explanation
SAS best practice is least privilege and short lifetime: grant only the permissions required (here, read) on the narrowest resource (one blob) with an expiry close to the use window. Over-scoped account permissions and long or missing expiries increase blast radius if the URI leaks. Starting validity slightly in the past can mitigate client clock skew.