public static Input<string> GetSasTokenedUrlToReadBlob(Input<string> resourceGroupName, Input<string> accountName, BlobContainer blobContainer, Blob blob)
    {
        const string signatureExpiration = "2100-01-01";
        const string signatureStart = "2000-01-01";

        var primaryStorageKey = GetConnectionString(resourceGroupName, accountName);
        
        var sasToken = Output.Tuple(primaryStorageKey, blobContainer.Name)
            .Apply(parameters =>
            {
                var primaryStorageKey = parameters.Item1;
                var containerName = parameters.Item2;

                return AzureClassicStorage.GetAccountBlobContainerSAS.InvokeAsync(new AzureClassicStorage.GetAccountBlobContainerSASArgs
                {
                    ConnectionString = primaryStorageKey,
                    ContainerName = containerName,
                    HttpsOnly = true,
                    Start = signatureStart,
                    Expiry = signatureExpiration,
                    Permissions = new AzureClassicStorage.Inputs.GetAccountBlobContainerSASPermissionsArgs
                    {
                        Read = true,
                        Write = false,
                        Delete = false,
                        List = false,
                        Add = false,
                        Create = false
                    }
                });
            });

        return Output.Tuple(blob.Url, sasToken).Apply(x => $"{x.Item1}{x.Item2.Sas}");
    }