Currently I use Azure's Shared Access Signature to access blobs directly, bypassing the web service. This has a great benefit in performance, as the blob doesn't need to travel from the storage to the web service, and then to the client application.
I want to know if there is a similar mechanism in MS-SQL: I would like to provide an accessible and secured URI to the client app, so it can download an specific blob straight from the database. I don't want to provide unlimited access to the DB, like OData, just to a specific record.
Thanks in advance.