A restricted SAS (Shared Access Signature) token is a secure, limited-access key used to control how users interact with Azure Storage during file uploads. Unlike a general SAS token, a restricted SAS token is configured with specific permissions and constraints.
With this feature, admins can define a separate SAS token specifically for the file upload screen, ensuring that users can only upload files under controlled conditions.
For example, you can restrict access so that files can only be uploaded from a particular screen (internal or external) and prevent unauthorized usage from other sources.
This enhances overall security by:
- Limiting access to upload only
- Preventing misuse of storage access
- Ensuring controlled and secure file transfers