Jannet also enabled the Shared access signature (SAS) configuration as well for the storage account resource consumption through the expiration policy.
For Authorization of Blob & Queue, which of the following resources are required? 

Answer options:

A.SAS token only
B.Storage Account Name & Key only
C.Azure AD credentials for Blob & Queue with Storage account key or SAS token
D.Using Blob Service & Queue Service Endpoints
E.Using Customer managed key

Correct Answer: C 

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal