Facing error in copy activity with error "failed at sink"

Question

Failure happened on 'Sink' side. ErrorCode=FileForbidden,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Error occurred when trying to upload a blob, detailed message: data_d26610b8-ec02-408d-8b61-27279867de0c_a3bad005-67a1-4729-bb49-999ac15b0b6c.txt,Source=Microsoft.DataTransfer.ClientLibrary,''Type=Microsoft.WindowsAzure.Storage.StorageException,Message=The remote server returned an error: (403) Forbidden.,Source=Microsoft.WindowsAzure.Storage,StorageExtendedMessage=Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature. RequestId:319b2dc2-c01e-000e-2949-45cafc000000 Time:2024-01-12T11:19:48.0488562Z,,''Type=System.Net.WebException,Message=The remote server returned an error: (403) Forbidden.,Source=Microsoft.WindowsAzure.Storage,'

Answer 1

Hi Sowmya MS Thanks for reaching out to Microsoft Q&A. It is unable to complete the authentication process. SAS token might be missing 'signing permissions' parameter. Can you once check your SAS token and confirm that it has been correctly formed? Please 'Upvote'(Thumbs-up) and 'Accept' as answer if the reply was helpful. This will be benefitting other community members who face the same issue.

Answer 2

@Sowmya MS Firstly, Apologies for the delay response here!
Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Based on your error message and Requested ID SAS token has been expired? Please regenerate the SAS token through Storage explorer tool and try again. You may also validate if your storage account is firewall enabled ? Steps:-
Azure Portal -> Storage Account -> Networking -> Check Allow Access From (All Networks / Selected Networks)
If it is "Selected Networks" - It means the storage account is firewall enabled.

Couple of additional work arounds mentioned here
https://stackoverflow.com/questions/24492790/azurestorage-blob-server-failed-to-authenticate-the-request-make-sure-the-value

• Also , just validate how are you trying to access the container. In general, you cannot directly get a container like: https://storageaccountname.blob.core.windows.net/containername?{SAS token} Either you can add entire blob path to it or add a "restype=container" to get container Try to add a blob path to the URL: https://storageaccountname.blob.core.windows.net/containername/{folder}/{blob}?{SAS token}
• Basically , the correct way to get container is: generate an account SAS
  append it to the container URL
  append "restype=container" or “restype=container&comp=list”

If you are trying to access the container using some application , try to use all lowercase characters while accessing : https://learn.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-shares--directories--files--and-metadata#metadata-names Sometimes , rotating the keys might help !

Please let us know if you have any further queries. I’m happy to assist you further.     

---Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.