Azure Storage Blobs allow the creation of pre-authorized URL’s through the use of SAS tokens. User Delegation SAS Tokens allow for the creation of SAS tokens using AAD identities and without required access to the storage account access key, and are now generally available and supported for use with production workloads.
Source: Microsoft Azure – aggiornamenti