Azure disk breaking change - Disk SAS limit max expiry to 5184000 seconds (60 days)

[VikasMohandoss]

Preconditions

• No need to upgrade Python SDK or the Python SDK is ready.

Related command

https://learn.microsoft.com/en-us/cli/azure/disk?view=azure-cli-latest#az-disk-grant-access

Resource Provider

Microsoft.Compute/disks

Description of Feature or Work Requested

We're making changes to our service that will affect how you access Managed Disks using Shared Access Signatures (SAS) for scenarios such as exporting and importing Virtual Hard Drives (VHDs). These changes are necessary to improve the security of SAS usage with our service. Here is what you need to know:

We will limit the Shared Access Signature (SAS) access time to disks and snapshots to a maximum of 60 days. Any call to generate a disk or snapshot SAS with an expiry of larger than 60 days will result in a client error. You can find more details on the scenarios here and here.
Any existing disk or snapshot SAS that has already been requested with an expiry greater than 60 days is not going to be supported beyond the 60 day limit and can result in a 403 error during authorization.

ASK:Add warnings about Disk SAS max duration limit is going to be restricted to 5184000 seconds (60 days) from 2/15/2025

Minimum API Version Required

N/A

Swagger PR link / SDK link

N/A

Request Example

No response

Target Date

2022-08-15

PM Contact

vimohand

Engineer Contact

vikramd

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[yanzhudd]

Hi @VikasMohandoss
allow me to confirm with you if this feature is related to security?

[microsoft-github-policy-service]

Hi, we're sending this friendly reminder because we haven't heard back from you in a while. We need more information about this issue to help address it. Please be sure to give us your input within the next 7 days. If we don't hear back from you within 14 days of this comment the issue will be automatically closed. Thank you!