HANDS ON SharePoint
HANDS ON Teams
HANDS ON Lists
HANDS ON tek
M365 Admin
Power Platform – Storage Shared Access Signature security enhancements announcement
We are announcing the public preview of security enhancements for Storage Shared Access Signature (SAS) for the Microsoft Power Platform. These new security enhancements will be made available for public preview starting on July 15, 2024, and we plan to be make it widely available starting on August 1, 2024.
How does this affect me?
This security enhancement adds IP restrictions to SAS calls, which are used to provide data export to users or to collect data imports from users. This feature will allow tenant admins to configure the following controls at an environment level:
SAS IP Restrictions – This control will allow admins to add IP restrictions to SAS calls outlined in the below table and this documentation: Storage Shared Access Signature (SAS) IP restriction
| Setting | Description |
|---|---|
| IP Binding Only | This restricts SAS keys to the requester’s IP. |
| IP Firewall Only | This restricts using SAS keys to only work within an admin specified range. |
| IP Binding and Firewall | This restricts using SAS keys to work within an admin-specified range and only to the requestor’s IP. |
| IP Binding or Firewall | If the request comes from within the specified range, its only usable within that range. If the request comes from outside the range, IP Binding is applied. |
Logging of SAS calls – This control enables all SAS calls within Power Platform to be logged into Purview. This logging shows the relevant metadata for all creation and usage events and can be enabled independently of the SAS IP restrictions. More information about this control can be found in this documentation: Logging of SAS calls
What do I need to do to prepare?
Leading up to and during the public preview period, admins will be able to find these controls in the Power Platform admin center. Admins can access these controls using the following path:
Environments > Select Desired Environment > Settings > Product > Privacy + Security > Storage Shared Access Signature (SAS) Security
If you experience any issues with this new feature or have additional questions, please contact Microsoft Support.
Message ID: MC807405
