Azure CLI — Storage Cheat Sheet 2026

Azure CLI Storage Cheat Sheet is the complete quick-reference of Azure CLI Storage commands grouped by function. Copy any command with one click and find what you need with Ctrl+F in under 3 seconds.

Storage

Action	Command	Useful flags
Create a storage account specifying a location	`az storage account create --resource-group <group_name> --name <account_name> --location <location> --sku <account_sku>`	`--resource-group --name --location --sku`
List all storage accounts in a resource group	`az storage account list --resource-group <group_name>`	`--resource-group`
List the access keys for a storage account	`az storage account keys list --resource-group <group_name> --name <account_name>`	`--resource-group --name`
Delete a storage account	`az storage account delete --resource-group <group_name> --name <account_name>`	`--resource-group --name`
Update the minimum tls version setting for a storage account	`az storage account update --min-tls-version <TLS1_0\|TLS1_1\|TLS1_2> --resource-group <group_name> --name <account_name>`	`--min-tls-version --resource-group --name`
Create a storage account	`az storage account create --name <storage_account_name> --resource-group <azure_resource_group> --location <azure_location> --sku <storage_account_sku>`	`--name --resource-group --location --sku`
Generate a shared access signature for a specific storage account	`az storage account generate-sas --account-name <storage_account_name> --name <account_name> --permissions <sas_permissions> --expiry <expiry_date> --services <storage_services> --resource-types <resource_types>`	`--account-name --name --permissions --expiry`
List storage accounts	`az storage account list --resource-group <azure_resource_group>`	`--resource-group`
Delete a specific storage account	`az storage account delete --name <storage_account_name> --resource-group <azure_resource_group>`	`--name --resource-group`
Download a blob to a file path specifying a source container	`az storage blob download --account-name <account_name> --account-key <account_key> --container-name <container_name> --name <blob_name> --file <path/to/file>`	`--account-name --account-key --container-name --name`
Download blobs from a blob container recursively	`az storage blob download-batch --account-name <account_name> --account-key <account_key> --source <container_name> --pattern <filename_regex> --destination <path/to/destination>`	`--account-name --account-key --source --pattern`
Upload a local file to blob storage	`az storage blob upload --account-name <account_name> --account-key <account_key> --container-name <container_name> --name <blob_name> --file <path/to/file>`	`--account-name --account-key --container-name --name`

⚠️ Dangerous / Destructive Commands

These commands are irreversible. Verify your environment (dev/staging vs prod) before running them.

Action	Command	Warning
⚠️ Storage account	`az storage account delete --resource-group <group_name> --name <account_name>`	Irreversible — verify the target before running
⚠️ Storage account	`az storage account delete --name <storage_account_name> --resource-group <azure_resource_group>`	Irreversible — verify the target before running

FAQ — Frequently Asked Questions

What is the difference between Storage and the other groups?

Each group in this Azure CLI cheat sheet covers a distinct area. Storage focuses on its specific scope, while the other groups and the remaining groups cover networking, storage, security and diagnostics respectively.

How do I check the installed Azure CLI version?

Run the version command (usually az version or az --version). The output shows the client and, when applicable, the server version.

Why does Azure CLI return ‘permission denied’?

A ‘permission denied’ error in Azure CLI usually means the current user lacks sufficient privileges or credentials are not configured. Check: (1) assigned IAM/RBAC roles, (2) an active authentication context via the corresponding login command.

How do I filter Azure CLI output by status or name?

Use flags such as --filter, --selector or --query depending on the tool. You can also pipe into grep or jq to process JSON:

az list | grep RUNNING

What is the fastest way to debug a Azure CLI error?

Add the verbose flag (--verbose, -v or --debug) to the failing command. This reveals the underlying HTTP/API calls and the full error response body.

Official sources & references

Commands cross-checked against vendor documentation and high-authority repositories:

raw.githubusercontent.com