Share via

Once storage account Enabled from selected virtual networks and IP addresses unable to view the logic app workflow

Raj Rajendran 0 Reputation points
2023-04-20T11:08:18.3466667+00:00

Once storage account Enabled from selected virtual networks and IP addresses unable to view the logic app workflow which also has the private endpoint to the same subnet

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,639 questions
Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
2,996 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sonny Gillissen 3,351 Reputation points
    2023-04-23T19:59:38.2033333+00:00

    Hi Raj Rajendran Thank you for reaching out on Microsoft Q&A! It seems like there is an issue with your connection to the storage account, blocking access to the workflow designer. This is a common error which is addressed in the following Learn topic: https://learn.microsoft.com/en-us/azure/logic-apps/deploy-single-tenant-logic-apps-private-storage-account#troubleshoot-common-errors Please click “Accept answer” if you find this helpful. Feel free to drop additional queries in the comments below!

    0 comments
  2. Sumarigo-MSFT 45,416 Reputation points Microsoft Employee
    2023-04-25T11:30:30.2233333+00:00

    @Raj Rajendran Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

    If you have enabled the "Selected networks" option in your Azure Storage account firewall and virtual networks settings, and you are unable to view the Logic App workflow that has a private endpoint to the same subnet, it could be because the necessary network routing or security rules are not configured correctly. Here are some things you can check to resolve the issue:

    1. Ensure that your virtual network and subnet are correctly configured with the necessary network security groups (NSGs) and route tables. The NSGs should allow inbound traffic to the storage account and the private endpoint IP address. The route tables should have the necessary routing rules to allow traffic between the storage account and the private endpoint.
    2. Check that the private endpoint is correctly configured to point to the storage account. Ensure that the DNS zone and DNS record for the private endpoint are set up correctly.
    3. Check that your Logic App workflow is also correctly configured with the necessary NSGs and route tables. Ensure that the NSGs allow inbound traffic from the storage account and the private endpoint IP address. The route tables should have the necessary routing rules to allow traffic between the Logic App workflow and the storage account. (Identify the NSG associated with the subnet: In the Azure portal, navigate to the virtual network that contains the subnet associated with the storage account and the Logic App workflow1. Under the "Settings" section, select "Subnets" and identify the NSG associated with the subnet.) Add inbound NSG rules: In the NSG associated with the subnet, add inbound rules to allow traffic from the Logic App workflow to the storage account. You can do this by creating a new rule that allows traffic from the source IP address of the Logic App workflow to the destination IP address of the storage account. You may also need to specify the protocol and port number, depending on the specific scenario. Test the connection: Once the NSG rules are configured, you can test the connection between the Logic App workflow and the storage account to ensure that it is working correctly.
    4. Verify that the Logic App workflow's private endpoint is correctly configured to point to the same subnet as the storage account. Ensure that the DNS zone and DNS record for the private endpoint are set up correctly. If none of the above suggestions resolve the issue, you may need to check the logs and diagnostics for both the storage account and the Logic App workflow to identify any issues or errors that may be causing the problem.

    If you have checked all of these things and you are still unable to view your logic app workflow, you may need to troubleshoot further. You can use tools like nslookup, psping, and tcpping to test connectivity to your storage account over the private endpoint, and you can also check the logs for your logic app and storage account to see if there are any errors , If so share the screenshot Please let us know if you have any further queries. I’m happy to assist you further. Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments