I am trying to create a user delegation sas for a storage account blob in Azure and found this document.
https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas
Looking through the document, I found that the user delegation SAS grants access to Azure Blob Storage resources by using Microsoft Entra credentials, we need to create "User Delegation Key" to be used to sign a user delegation SAS (shared access signature).
It also mentions that we can specify the user delegation key to be valid up to seven days and create SAS token over the lifetime of the key.
I need the SAS token to be longer. The sas token needs to be static and will be securely shared to an external client for at least one month.
The alternative would be to create service SAS.
https://learn.microsoft.com/en-us/rest/api/storageservices/create-service-sas
As Microsoft recommends using Microsoft Entra ID with managed identities, could you please let me know if there are any other method that I can use Microsoft Entra ID with managed identities to create SAS token for at least one month?