Hello,
What Saas Token type you need to rotate: Storage Account or BLOB Account? Both will use different powershell command: New-AzStorageAccountSASToken or New-AzureStorageBlobSASToken. Both can be easy to port to your powershell script, especially whenever you need it run as an automated process. You simply pass your azure email and password for getting the authentication and then run one of those 2 functions depending on your requirement.
Let's get discuss of your requirement.
Best Regards,
Khamid