Unable to delete VNet due to serviceAssociationLinks/AppServiceLink

Kien_NDM 116

Hi,

I have deployed an Azure system including virtual networks and app services. Then, when doing virtual network deletion, I had some problems. I got the message and the subnet uses the above vnet. Then I delete the subnet and get the message that there are app services using the above subnet. In fact, there are no app services at all. When using the command below:

az network vnet subnet list --resource-group [...] --vnet-name [...]

As a result, I discovered that 1 [Microsoft.Network/virtualNetworks/subnets/serviceAssociationLinks] cannot be deleted.

Remove-AzureRmVirtualNetwork : Subnet snet-bo is in use by /subscriptions/[..id...]/resource
Groups/Disabled/providers/Microsoft.Network/virtualNetworks/vnet-drug/subnets/snet-bo/serviceAssociationLinks/AppServic
eLink and cannot be deleted. In order to delete the subnet, delete all the resources within the subnet. See
aka.ms/deletesubnet.
StatusCode: 400
ReasonPhrase: Bad Request
OperationID : 'bbc8987b-ffd1-420e-80c7-5913ef43b069'
At line:1 char:1

Remove-AzureRmVirtualNetwork -Name vnet-drug -ResourceGroupName disab ...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : CloseError: (:) [Remove-AzureRmVirtualNetwork], NetworkCloudException

FullyQualifiedErrorId : Microsoft.Azure.Commands.Network.RemoveAzureVirtualNetworkCommand

Please support, thank you.

Dylan Elder 30 Reputation points

2023-06-21T20:13:19.6666667+00:00

I'm experiencing the same issues with a recently created vnet and resource group. Super frustrating.
Carlos Bernardo Jr 30 Reputation points

2023-07-07T11:00:44.7666667+00:00

Same here. Can't delete and the workaround won't work.
Doug Nelson 10 Reputation points

2023-08-09T12:47:40.4+00:00

I have the same issue. I have deleted all items in the resource group except for the Subnets in the Virtual Network. I am still being charged for an Azure Database for MySQL Flexserver that doesn't exist.

HELP PLEASE!
Medha Bhatt 6 Reputation points

2023-11-20T14:26:09.95+00:00

I am experiencing the same issue and this is such a bad customer experience. Also the error message is not at all user friendly and doesn't even indicate what should be done next.

Even the workaround given below is useless.

Accepted answer

suvasara-MSFT 10,001 Reputation points

2020-10-28T10:31:48.677+00:00
@Kien_NDM , Apologies for the delay in response. This is a known issue, and the only way you will be able to get this deleted is to contact Azure Support. If you do not have a support plan, please Email me at with your subscription ID and a link to this post, and I will enable a one-time free support request for you to get the subnet deleted.

Workaround:

Create App Service Plan with the same name as the deleted one

Create App Service with the same name as the deleted one

Link App Service with the VNET subnet

Disconnect VNet from App Service -> Networking -> VNet integration -> Disconnect

Delete subnet

Reason for this Error:
The new VNET integration feature (Regional Vnet Integration) must set locks on subnets in the Network Resource Provider, we set these locks by putting a structure called a Service Association Link onto the Subnet, which is a privileged operation that only Microsoft.Web and some other internal Azure services have access to, this ends up being odd cases where these locks don't get cleaned up. The result is that the customer will have a subnet that cannot be deleted or used because a Service Association Link still exists on the subnet.
Azure App Service and Azure Networking Product Group keep working on to fix the issue completely.

----------

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.
Please sign in to rate this answer.

11 people found this answer helpful.
suvasara-MSFT 10,001 Reputation points

2020-12-04T09:30:22.573+00:00

@Kien_NDM ,

If you think your question has been answered, click "Mark as Answer" if just helped click "Vote as helpful". This can be beneficial to other community members reading this forum thread.

Best regards
Subhash

Andrew Hunt 41 Reputation points

2021-02-24T19:59:33.99+00:00

Is there any progress on this fix? I did two separate ARM deployments that setup a VNet integration to app service and both hit this issue which makes me think your comment about it sometimes not getting cleaned up should be amended to say always not getting cleaned up. We spin up and down entire resource group deployments which will now include such vnet integrations with app service and having them not delete properly on an ongoing basis is going to cause significant clutter on our subscription.

a4andrew 36 Reputation points

2021-03-09T19:35:48.66+00:00

What happens if you have forgotten the name of the original app service?

Andrew Hunt 41 Reputation points

2021-03-10T14:38:50.6+00:00

Updating to include that more than clutter this now fails our resource group deletions which is a deeply frustrating user experience for the developers, PMs, and QA who rely on these features as part of our development cycle. Please fix this ASAP

Franciosi, Tom 1 Reputation point

2021-07-22T18:51:09.593+00:00

Well, that worked for me and the persistent VNET is gone. Thanks!

Ryan Hill 25,666 Reputation points Microsoft Employee

2021-07-26T16:27:17.597+00:00

If you have forgotten the name, you can use Get-AzDeletedWebApp (Az.Websites) | Microsoft Learn to retrieve the app name. For getting the details of the app service plan, you can go to Resource explorer from your portal. After going, you can go to the subnet details and you can get the details of previous app service plan in which previous integrated web app is hosted as shown below.

Jiri Mensik 6 Reputation points

2022-08-08T18:00:06.173+00:00

1) In my case support is claiming that they cannot delete any resource on my behalf.
2) For the workaround. My subnet was delegated to Flexible PostgreSQL server. After adding back the server and trying to remove the delegation to "Microsoft.DBforPostgreSQL/flexibleServers" on given subnet I get

Failed to save subnet 'mysubnet'. Error: 'Subnet mysubnet requires any of the following delegation(s) [Microsoft.DBforPostgreSQL/flexibleServers] to reference service association link /subscriptions/someID/resourceGroups/someName/providers/Microsoft.Network/virtualNetworks/someName/subnets/someName/serviceAssociationLinks/someId-service-association-link.'

What should be my next step?
Thank you
Jiri

Jyothi Chaganty 6 Reputation points

2022-10-10T15:40:09.827+00:00

Steps 1 and 2 are fine, but Step 3 is a problem.
I tried creating app service and subscription plan with the same name. but I couldn't assign the subnet to this new resource. It says it is already allocated.

Jiri Mensik 6 Reputation points

2022-10-11T07:48:49.66+00:00

I got it solved with support who claimed it was a bug (they were not specific) which got fixed afterwards. Additionally they deleted the association link.
So, hopefully 1 less issue.

MaiaV 1 Reputation point

2022-12-21T17:35:00.53+00:00

I had 4 webapps in the subnet, I had to follow do workaround for each of them.
But it solved my issue.

Jacin Labrador 0 Reputation points

2023-04-20T22:38:09+00:00

I am having this problem and I do not have a support plan as far as I can tell. Thanks.

Arkia Consulting 0 Reputation points

2023-05-17T13:33:22.4+00:00

As a side note, you don't have to remember the name of the web app, just create any web app with any name. The goal is only to setup a link to the existing subnet, through the named App Service Plan, then disconnect it. The name of the web app does not have to be the same as the deleted one.

Steven Life 5 Reputation points

2023-07-15T19:47:31.4033333+00:00

We can't allocate the existing subnet we want to delete to the new app service other than creating a new subnet. Please suggest what we could do. It seems like it is costing 2 dollars everyday because of this subnet can't be deleted.

Gennaro Eduardo Tangari 5 Reputation points

2023-08-10T12:08:00.14+00:00

I have this problem too: I can't believe that since so long time this problem has not been fixed.

中垣茂(ESM) 0 Reputation points

2023-09-21T02:02:16.87+00:00

This workaround dose not work for my case.

I can not link App Service with the VNET subnet because I can not select the VNET subnet. The reason which can not be selected is the VNET subnet is already delegated.

I'm waiting for one time free support.

thanks

Kevin Kennedy 1 Reputation point

2023-12-22T00:21:37.4933333+00:00

I have this issue and no service plan. Can you please help me?

Taylor Stooke 0 Reputation points

2024-01-16T21:58:39.4166667+00:00

Not sure if I'm doing something wrong with the Resource Explorer, but I wasn't able to find the linked ASP for my subnet using that tool. Instead, I used this az cli command:

az network vnet subnet list --resource-group [RG-NAME] --vnet-name [VNET-NAME]

The resulting output included a serviceAssociationLinks array for the subnet(s), and that showed the name of the deleted ASP. Since the link is based on the Resource Name rather than the ID, creating a new ASP with the same name allows you to "recreate" the link and then delete it. The name of the App Service (or Function App) didn't matter when I did this.

You'll have to be logged on and have the correct Subscription set as active, of course.

Hubert Mocko 0 Reputation points

2024-01-19T11:44:32.75+00:00

I am experiencing the same issue and this workaround doesn't work. It is January 2024 now. Because of that I can't get rid of vnet nor entire resource groups.

Dennes Torres 6 Reputation points

2024-02-05T13:51:27.2433333+00:00

The step 3 of the work around doesn't work because the app service can only be associated with a subnect which is not delegated yet
Sign in to comment

8 additional answers

Jose Wildner 10 Reputation points

2023-03-25T02:59:05.11+00:00

Hello Team

I had the same issue

but I coulnd't apply the workaround and the azure portal dont leave me open a case for this issue, just fowarding me to this post.
Please sign in to rate this answer.

2 people found this answer helpful.

0 comments No comments
Sign in to comment
Al Iacovella 0 Reputation points

2023-05-19T16:22:24.31+00:00

Just ran into this myself. What gives, this was reported in October 2020 and it is still happening.
Please sign in to rate this answer.
Ryan DiFrancesco 0 Reputation points

2023-05-19T17:26:30.84+00:00

If you're able to, open support case in the portal. Once you describe and categorize your issue, it should auto-detect that there is an orphaned AppServiceLink in your subscription and will automatically submit a request to have it removed on the backend. This process worked for me last week.

But, yes, I agree that this should not still be happening.
Sign in to comment
Samuel Nihipali 0 Reputation points

2023-07-26T22:21:48.31+00:00

I'm getting this error as well. I had an Web app + Database and didn't realize that I had to disconnect the subnet from the vnet before deleting the resource group. Not I can't delete the subnet or vnet. I've tried recreating but it either fails because the resource already exists or unable to assign the subnet due to it being assigned already. Any chance of getting a one-time support ticket?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Samuel Nihipali 0 Reputation points

2023-07-26T22:22:28.61+00:00

I'm getting this error as well. I had an Web app + Database and didn't realize that I had to disconnect the subnet from the vnet before deleting the resource group. Not I can't delete the subnet or vnet. I've tried recreating but it either fails because the resource already exists or unable to assign the subnet due to it being assigned already. Any chance of getting a one-time support ticket?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment