In this Azure lab you will learn how to allow users to access Storage account and its services with limited permissions using Shared Access Signature.

Shared Access Signature(SAS)

SAS is a URI that grants restricted access rights to Azure Storage resources.
          You can provide a shared access signature to clients who should not be trusted with your storage account key but to whom you wish to delegate access to certain storage account resources.

Blob Storage
A blob (Binary Large Object) consists of binary data stored as a single item.
While data can be of any type, blob storage is particularly useful for storing media, such as audio and video, and frequently changing data, such as log files.