> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dataraven.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Blob Storage

> Connect Azure Blob Storage containers as sources and destinations for transfer tasks.

Azure Blob Storage containers. The only provider with a choice of auth method — SAS URL or
account key.

## At a Glance

|                   |                                                              |
| ----------------- | ------------------------------------------------------------ |
| **Region**        | Required — Azure region, e.g., `eastus`, `westus2`           |
| **Endpoint URL**  | Not needed                                                   |
| **Credentials**   | SAS URL, **or** account name + account key                   |
| **Task defaults** | None — Azure Blob works well with rclone's standard behavior |

## Credentials

Create a [secret](/secrets) with the **Azure Blob** provider type. Azure is the one provider
where you choose between two auth methods:

| Auth method         | Required fields               |
| ------------------- | ----------------------------- |
| `azure_sas_url`     | `sas_url`                     |
| `azure_account_key` | `account_name`, `account_key` |

**Prefer SAS URLs over account keys.** SAS (Shared Access Signature) URLs are scoped to specific
containers and operations, and they expire automatically. Account keys grant full access to the
entire storage account. Generate the SAS URL from the Azure portal with the minimum required
permissions (read/write/list) and a reasonable expiration window.

## Location Setup

| Field             | Value                                                              |
| ----------------- | ------------------------------------------------------------------ |
| **region**        | Required — the Azure region where your storage account is deployed |
| **endpoint\_url** | Leave blank                                                        |

Example:

| Field          | Example value              |
| -------------- | -------------------------- |
| name           | `Azure Prod Archive`       |
| location\_type | Azure Blob Storage         |
| bucket\_name   | `archive` (container name) |
| region         | `eastus`                   |

## Importing from rclone.conf

Azure remotes appear in `rclone.conf` as `type = azureblob`. If the remote has a `sas_url`, it
imports with the SAS URL auth method; otherwise the `account` and `key` fields import as an
account-key secret. The remote's `container` value carries over as the bucket name. See the
[rclone import guide](/guides/import-rclone-config).