Ensure the x-ms-date header is in UTC format if using Shared Key.
If your container's access level is set to "Blob" or "Container" (Public), downloading is straightforward. You only need the direct URL of the file. download file from azure blob storage using curl
You can generate a SAS token via the Azure Portal, Azure CLI, or PowerShell. Ensure the token has "Read" permissions. Step 2: Execute the Curl Command Ensure the x-ms-date header is in UTC format
If you cannot use a SAS token and must use the Storage Account Key directly, you have to manually construct an Authorization header. This is complex because Azure requires a HMAC-SHA256 signature of the request. The Shell Script Approach You can generate a SAS token via the
If your file name contains spaces or special characters, ensure they are URL-encoded (e.g., a space becomes %20 ). Summary Checklist Security Level Public assets (CSS, Images) SAS Token Temporary access, CI/CD pipelines Shared Key Internal administrative scripts Critical (Handle with care) To help you get the exact command you need: Are you downloading from a private or public container?
Integrating Azure Blob Storage into your command-line workflow or automation scripts is often best handled via curl . While Microsoft provides robust SDKs and the Azure CLI, curl remains the universal standard for lightweight, dependency-free file transfers.
storage_account="your_account" storage_key="your_key" container="your_container" blob="your_file.txt" request_date=$(date -u +"%a, %d %b %Y %H:%M:%S GMT") storage_service_version="2020-02-10" # Construct the String to Sign string_to_sign="GET\n\n\n\n\n\n\n\n\n\n\n\nx-ms-date:$request_date\nx-ms-version:$storage_service_version\n/$storage_account/$container/$blob" # Generate the Signature decoded_key=$(echo -n "$storage_key" | base64 -d -w0) signature=$(printf "$string_to_sign" | openssl dgst -sha256 -mac HMAC -macopt "key:$decoded_key" -binary | base64 -w0) # Execute Curl curl -H "x-ms-date: $request_date" \ -H "x-ms-version: $storage_service_version" \ -H "Authorization: SharedKey $storage_account:$signature" \ "https://$storage_account.blob.core.windows.net/$container/$blob" -o "downloaded_file.txt" Use code with caution. 4. Troubleshooting Common Issues 💡 Check if your SAS token has expired.