title: Why does Azure recommend User Delegation Shared Access Signatures
body: <p>In the Microsoft documentation, it is recommended that professionals use User Delegation Shared Access Signatures rather than key-based Shared Access Signatures. Specifically, why is this the case?</p>
  <p>In this <a href="https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview" rel="nofollow noreferrer">document</a>, it is specified that:</p>
  <blockquote>
  <p>Microsoft recommends that you use Azure AD credentials when possible
  as a security best practice, rather than using the account key, which
  can be more easily compromised. When your application design requires
  shared access signatures for access to Blob storage, use Azure AD
  credentials to create a user delegation SAS when possible for superior
  security.</p>
  </blockquote>