Azure App Service Custom Backup to Firewall Enabled Storage Account not working as expected
We have a set of App Services, all integrated within a VNet. Our Storage Account has Firewall enabled with access given to the Vnet in which all the App Services are integrated.
When I setup a Custom backup to a Container in the Storage account, with Backup/restore over virtual network option Enabled, the custom backup should work.
But it is not the case, it returns following error:
Storage access failed. The remote server returned an error: (403) Forbidden.. Please delete and recreate backup schedule to mitigate.
It works only when I add all the Outbound IP Addresses of the App Service to the Storage account firewall whitelist.
Why is it so?
Azure App Service Custom Backup to Firewall Enabled Storage Account not working as expected.
To access the storage account from the App Service via a private network (VNet) for configuring the custom backup in the Storage account, it is not required to add IP addresses in the firewall rules. check the following below points.
Make sure to check that both the storage account and the app service are configured in the same VNet, and also check if the NSG rules are denying traffic.
I have created an App Service with VNet named 'App-vnet' and subnet named 'app-subnet' as below.
Created storage account with same Vnet and subnet as below.
When I try to access the storage account from the app, it's working, and I configured a backup in the storage account.
- Azure Service Plan - Convert Consumption App to Premium App
- No PK or FK when exporting SQL Server database
- Assigning a Token Lifetime Policy to an application in Microsoft EntraID seems to have no effect
- How to create a dataset for Azure custom speech using spx (speechCLI)
- Azure App Service Autoscale Fails to Scale In
- Azure Scale Out on Memory keeps flapping (not scaling in)
- Setting a server minimum for Azure Web App when using automatic scaling, from Bicep
- A keyvault created with access policy using BICEP creates compound identity
- Azure Loadbalancer with public IP forward traffic to Container Apps
- How to grant a Managed Identity permissions to an Azure SQL Database using IaC?
- What means skipNegotiation in SignalR HubConnection?
- Azure ClientCertificateCredential - Using SNI
- Azure AI Search MultiIndex / Conditional Semantic search
- MSAL Node service & The Partner Center API
- Load Registered Component in Azure ML for Pipeline using Python sdk v2
- Azure Blob:- How to automate Azure Archive Storage to Cool/Hot tier conversion, send download link once it's avaible , and re-archive after 72 hours?
- Azure App Service Custom Backup to Firewall Enabled Storage Account not working as expected
- How to take max value and replace it in drived column in data factory
- Synapse/ ADF - How to Truncate table if dynamic config column is True in pre-copy script
- Azure Cost Management - track costs associated with Databricks job
- Error: "OrganizationFromTenantGuidNotFound" (even with Microsoft 365 subscription)
- How to check Debug.Writeline() output in VS code?
- C# API - Provide download of files from Azure Blobstorage
- localhost:300/api is not working : "This page isn’t working"
- Creating an Azure Linux VM with Ubuntu 20.04 with Terraform
- Failed to deploy path that does not exist
- Using Azure WAF for my server(not in Azure)
- How and where to define an environment variable on Azure
- Azure Data Factory - Unable to preview data
- Azure yaml trigger pipeline every 14 days on a Saturday