ansible.azure.automation/roles/azure_sa/defaults/main.yml

---
#sas:
#  - name:
#    access_tier:
#    account_type:
#    blob_cors:
#    force_delete_nonempty:
#    https_only:
#    kind:
#    location:
#    resource_group:
#    state:
#    tags:
#      "env": "prod"
#      "provisioner": "ansible"
...