Share via

how to access azure storage account using private endpoint via azure P2S

$@chin 85 Reputation points
2024-06-19T16:13:30.1966667+00:00

hi,

A scenario where a client is using Point-to-Site connectivity and attempting to connect to an Azure Storage account through its private endpoint, the issue arises when the Storage account FQDN resolves to a public IP instead of the private endpoint IP. This results in a situation where users trying to connect using Storage Explorer encounter the error message: 'This request is not authorized to perform this operation without using the ER or S2S tunnel.

Can this be achieved using P2S ?

Azure DNS
Azure DNS
An Azure service that enables hosting Domain Name System (DNS) domains in Azure.
623 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,833 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,559 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,244 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
484 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Silvia Wibowo 3,331 Reputation points Microsoft Employee
    2024-06-20T02:29:50.0566667+00:00

    Hi @$@chin , I understand that you're having issues connecting to Azure Storage private endpoint via VPN P2S.

    Modify the downloaded profile XML file (for Azure P2S Client) and add these tags:

    <dnssuffixes> <dnssuffix>.privatelink.blob.core.windows.net </dnssuffix> </dnssuffixes>

    Reference: Add DNS suffixes

    If <dnssuffix>.privatelink.blob.core.windows.net</dnssuffix> does not work, try <dnssuffix>.blob.core.windows.net</dnssuffix>

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.