Access storage account with Automatio Account / Runbook

Question

Hi,
I would need to access file in my storage account with my Runbook but getting error message: The remote server returned an error: (403) Forbidden.

We are using Azure storage account firewall to restrict usage of storage account which is reason why I get that error message. Whitelisting all Automation account's ip address are not option because it is impossible to keep up with updates hundreds of ip-addresses. Azure storage firewall do not neither support Service tags. Allow access for trusted MS services is also enabled, but as far as I know Automation is not included as trusted service. Correct me if I'm wrong.

Are there at the moment any solutions to access storage account data from runbook if whitelisting all ip's is not included or turning firewall to "allow access from all networks"?

Answer 1

@Bombbe
There is currently a preview for Azure Automation Private Link. However, as part of the preview release, an Automation account cannot access Azure resources that are secured using private endpoint, such as a Storage Account. One option which might work for you is to use a Hybrid Worker Group in Azure Automation. The systems can be your physical systems that can reach Azure or your Azure VMs. You can then grant access to the IP addresses that are in your Hybrid Runbook Worker group.

I hope this information helps! Let me know if you have further questions or issues.

---------------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

@deherman-MSFT any update on this?