Logic Apps Standard ASEv3 Virtual Network Setup Route Table and NSG for Azure Managed Connectors

Question

Hi,

When I am trying to use Azure Managed Connector inside Logic Apps Standard which is deployed on internal ILB ASEv3 with Vnet.
I have added rule for Service Tag AzureConnectors in ASEv3 Subnet inside VNET. In NSG, all traffic going to internet is routed through Virtual Appliance. But still when I try to use Azure Connector it is throwing error UnAuthorized.

For example, we have Service Bus Premium where we have restricted access to Selected Networks. Here, we have added the ASEv3 subnet to allow access to Service Bus. Also, I have created Private Endpoint which is indifferent subnet but in same Vnet.
Still, I am unable to connect to Service Bus from Logic Apps Standard.
Getting below error:

{
"status": 401,
"message": "40112: Ip has been prevented to connect to the endpoint.\r\n For more information see:\r\n Virtual Network service endpoints:\r\n E
},
"source": "servicebus-ne.azconn-ne-003.p.azurewebsites.net"
}

Answer 1

@Kritika Singh Thanks for reaching out. The communication will be standard Logic App --> Service Bus (Azure) connector IP's --> service bus namespace. So, the service bus should allow the connector IP. You should whitelist the IPs of connector/tag.