Hi
Is the Logic App integrated to the virtual network? Do you have a Private DNS Zone setup for ‘privatelink.blob.core.windows.net’ with the A record pointing to your storage account name, and private endpoint NIC IP?
There is also an app setting:
- To access your logic app workflow data over the virtual network, in your logic app resource settings, set the
WEBSITE_CONTENTOVERVNET
setting to1
.
You can also use the Kudu backend to do an nslookup to check your LA resolves the private storage endpoint to rule out the LA trying to go via the public endpoint (hence the 403 potentially). Check this out:
Under Advanced Tools click Go, from here you can use the terminal to run an nslookup {storage-account-host-name}.blob.core.windows.net
Hopefully some of these get you working, if not let me know and I’ll try and help further!