In our docs, we say that the SAS tokens must be used to access the source/target containers, but SAS URL usage might not be permitted for all customers. Another option the service supports is access through managed identity: https://docs.microsoft.com/en-us/azure/cognitive-services/Translator/document-translation/managed-identity
This way the the URLs can be provided without SAS tokens. This needs to be added to our docs/readme.