Skip to content

Commit c74d4dc

Browse files
committed
Updates.
1 parent 4341d6b commit c74d4dc

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/virtual-machines/includes/disks-sas-change.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,14 +4,14 @@
44
author: roygara
55
ms.service: azure-disk-storage
66
ms.topic: include
7-
ms.date: 08/12/2024
7+
ms.date: 08/15/2024
88
ms.author: rogarana
99
ms.custom: include file
1010
---
1111
> [!IMPORTANT]
1212
> On February 15th, 2025, the Shared Access Signature (SAS) access time for disks and snapshots will be limited to a maximum of 60 days. Trying to generate a SAS with an expiration longer than 60 days results in an error. Any existing disk or snapshot SAS created with an expiration longer than 60 days may stop working 60 days after the date of creation and will result in a 403 error during authorization.
1313
14-
If a managed disk or snapshot SAS's expiration is longer than 60 (5,184,000 seconds) days, revoke its access and generate a new SAS that requests access for 60 days (5,184,000 seconds) or less. Use shared access signatures (SAS) with shorter expiration dates to improve your deployment's overall security. You should make these changes prior to February 15, 2025 to prevent service interruption. The following links can be used to find, revoke, and request a new SAS.
14+
If a managed disk or snapshot SAS's expiration is longer than 60 days, revoke its access, and generate a new SAS that requests access for 60 days (5,184,000 seconds) or less. Improve your overall security by using SAS with shorter expiration dates. Make these changes before February 15, 2025 to prevent service interruption. The following links can be used to find, revoke, and request a new SAS.
1515

1616
- To check if a disk has an active SAS, you can either use the [REST API](/rest/api/compute/disks/get?view=rest-compute-2024-03-01&tabs=HTTP#diskstate), the [Azure CLI](/cli/azure/disk?view=azure-cli-latest#az-disk-show), or the [Azure PowerShell module](/powershell/module/az.compute/get-azdisk?view=azps-12.0.0), and examine the **DiskState** property.
1717
- To revoke a SAS, you can use either the [REST API](/rest/api/compute/disks/revoke-access?view=rest-compute-2024-03-01&tabs=HTTP), the [Azure CLI](/cli/azure/disk?view=azure-cli-latest#az-disk-revoke-access), or the [Azure PowerShell module](/powershell/module/az.compute/revoke-azdiskaccess?view=azps-12.0.0).

0 commit comments

Comments
 (0)