Storage Account with Public Access Level Set to 'Private'

Sumeetha Mogasati 126

Hi,

The public access level is set to private because public access is disabled on my storage account.
On the Storage Account Firewall & Virtual Networks page Public Access is set to "Enabled from selected virtual networks and IP addresses"

A Container named SuperSecret is created on the Storage Account with the Public Access Level set to Private.
A Private Link is set up to have that internal endpoint, so it should not need public access.

Access to the content stored on the above Container (SuperSecret) via Private Link throws an exception "Public access is not permitted on this storage account".

I would appreciate any help in resolving this issue.

https://learn.microsoft.com/en-us/azure/storage/blobs/anonymous-read-access-configure?tabs=portal#about-anonymous-public-read-access

Thanks

Carlos Solís Salazar 16,531 Reputation points

2022-07-06T12:08:51.433+00:00

Thank you for asking this question on the **Microsoft Q&A Platform. **

You have not received answers or comments to your question because it may be ambiguous or confusing.

I recommend you visit How to write a quality question and verify that your question meets some of the recommendations.

Hope this helps,
Carlos Solís Salazar

----------

NOTE: To answer you as quickly as possible, please mention me in your reply.
SaiKishor-MSFT 17,186 Reputation points

2022-07-06T21:21:30.943+00:00

@Sumeetha Mogasati Thank you for reaching out to Microsoft Q&A. We apologize for the delay in responding to your issue. I understand that you are having issues privately connecting to your storage account via the private endpoint when the public access is not permitted.

Can you please confirm where you are accessing the storage account from i.e., the source? Also confirm the IP address/domain that you are using to access the storage account. Thank you!
SaiKishor-MSFT 17,186 Reputation points

2022-07-15T15:57:24.973+00:00

@Sumeetha Mogasati Any update?
Sumeetha Mogasati 126 Reputation points

2022-07-20T16:17:21.013+00:00

Hi @SaiKishor-MSFT , Apologies for the delayed response.

I am trying to access the Storage Account from an application via Http internally (not via Public Internet). IP Address / Domain is within our corporate network, cannot share this due to sensitive nature of the information.

Please confirm - The Storage Account with Public Access Level Set to Private is accessible via Http?

Thank you
Sumeetha Mogasati 126 Reputation points

2022-08-22T12:05:39.273+00:00

@SaiKishor-MSFT @Carlos Solís Salazar

Hi @SaiKishor-MSFT
Please review my latest response and provide your insight/help.

Regards
SaiKishor-MSFT 17,186 Reputation points

2022-08-23T23:59:31.547+00:00

@Sumeetha Mogasati I apologize for the delay in responding to your issue.

Can you confirm what IP address your storage domain resolves to by using nslookup? If you cannot share the details here, please email me at AzCommunity [at] microsoft dot com and subject ATTN: sai kishor, so we can connect offline regarding this. Thank you!