Azure:Manage anonymous read access to containers and blobs

Posted 2020-06-09

Grant anonymous users permissions to containers and blobs

By default, a container and any blobs within it may be accessed only by the owner of the storage account. To give anonymous users read permissions to a container and its blobs, you can set the container permissions to allow public access. Anonymous users can read blobs within a publicly accessible container without authenticating the request.

Containers provide the following options for managing container access:

• Full public read access: Container and blob data can be read via anonymous request. Clients can enumerate blobs within the container via anonymous request, but cannot enumerate containers within the storage account.

• Public read access for blobs only: Blob data within this container can be read via anonymous request, but container data is not available. Clients cannot enumerate blobs within the container via anonymous request.

• No public read access: Container and blob data can be read by the account owner only.

Features available to anonymous users

The following table shows which operations may be called by anonymous users when a container‘s ACL is set to allow public access.

REST Operation	Permission with full public read access	Permission with public read access for blobs only
List Containers	Owner only	Owner only
Create Container	Owner only	Owner only
Get Container Properties	All	Owner only
Get Container Metadata	All	Owner only
Set Container Metadata	Owner only	Owner only
Get Container ACL	Owner only	Owner only
Set Container ACL	Owner only	Owner only
Delete Container	Owner only	Owner only
List Blobs	All	Owner only
Put Blob	Owner only	Owner only
Get Blob	All	All
Get Blob Properties	All	All
Set Blob Properties	Owner only	Owner only
Get Blob Metadata	All	All
Set Blob Metadata	Owner only	Owner only
Put Block	Owner only	Owner only
Get Block List (committed blocks only)	All	All
Get Block List (uncommitted blocks only or all blocks)	Owner only	Owner only
Put Block List	Owner only	Owner only
Delete Blob	Owner only	Owner only
Copy Blob	Owner only	Owner only
Snapshot Blob	Owner only	Owner only
Lease Blob	Owner only	Owner only
Put Page	Owner only	Owner only
Get Page Ranges	All	All
Append Blob	Owner only	Owner only

选项“公共容器”对应Full public read access(可匿名访问本容器中的blob，可访问本容器的元数据，可枚举本容器的blob)

选项“公共Blob”对应Public read access for blobs only（可匿名访问本容器中的blob,但是不能枚举blob,也不能访问容器元数据）

选项“私有”对应No public read access（禁止匿名访问）