# Azure SDK Python
from azure.storage.blob import BlobServiceClient, generate_blob_sas, BlobSasPermissions
from azure.identity import DefaultAzureCredential
from datetime import datetime, timedelta
import os

# Authentication עם Managed Identity — לא access keys
credential = DefaultAzureCredential()
blob_service = BlobServiceClient(
    account_url=f"https://{os.environ['STORAGE_ACCOUNT']}.blob.core.windows.net",
    credential=credential
)

# Upload קובץ
container_client = blob_service.get_container_client("uploads")
with open("document.pdf", "rb") as data:
    container_client.upload_blob(
        name=f"users/user-123/document.pdf",
        data=data,
        content_settings=ContentSettings(
            content_type="application/pdf",
            cache_control="no-cache"
        ),
        overwrite=True
    )

# SAS Token לגישה זמנית
sas_token = generate_blob_sas(
    account_name=os.environ["STORAGE_ACCOUNT"],
    container_name="uploads",
    blob_name="users/user-123/document.pdf",
    account_key=os.environ["STORAGE_KEY"],
    permission=BlobSasPermissions(read=True),
    expiry=datetime.utcnow() + timedelta(hours=1)
)
url = f"https://{os.environ['STORAGE_ACCOUNT']}.blob.core.windows.net/uploads/users/user-123/document.pdf?{sas_token}"
Storage — S3, GCS, Blob Storage

Storage — S3, GCS, Blob Storage

Storage — S3, GCS, Blob Storage
