Issues with access blob using SAS token generated url is used in browser

Question

Issues with access blob using SAS token generated url is used in browser

Rajesh Kasani 0

Hi,

I have private storage account in azure which allows access via VPN to app services.

In my app service I am giving user access to view/download blob using SAS token attached url via browser window.

the system that is accessing app service in browser is connected to VPN. but user is not able view/download blob in browser using SAS url.

I found that the issue is related to IP restrictions. how can I allow SAS url to download in case the setting in allow selected networks only.

SaiKishor-MSFT 17,336 Reputation points

2023-03-16T18:32:42.87+00:00

@Rajesh Kasani Thanks for reaching out to Microsoft Q&A.

I understand that you are having issues with accessing Blob Storage via VPN/App Services.

Can you please provide a network diagram of your setup and what Firewall of rules you have on the storage account? Please also let me know if you are using any private endpoint/service endpoint/VNET integration etc., so I can understand better. Thank you!
Sumarigo-MSFT 47,466 Reputation points Microsoft Employee Moderator

2023-03-31T02:46:17.42+00:00

@Rajesh Kasani Just checking in to see if the below answer helped. If this answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

SaiKishor-MSFT 17,336 Reputation points

2023-03-16T18:32:42.87+00:00

@Rajesh Kasani Thanks for reaching out to Microsoft Q&A.

I understand that you are having issues with accessing Blob Storage via VPN/App Services.

Can you please provide a network diagram of your setup and what Firewall of rules you have on the storage account? Please also let me know if you are using any private endpoint/service endpoint/VNET integration etc., so I can understand better. Thank you!
Sumarigo-MSFT 47,466 Reputation points Microsoft Employee Moderator

2023-03-31T02:46:17.42+00:00

@Rajesh Kasani Just checking in to see if the below answer helped. If this answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Thank you for asking this question on the Microsoft Q&A Platform.

When you configure a private link, there are some requirements at the DNS level.

You must have a DNS server in Azure and do a DNS Forwarding to 168.63.129.16

On-premises using Azure DNS

For more details https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder

Hope this helps!

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

Share via

Issues with access blob using SAS token generated url is used in browser

1 answer

Your answer