How do I fix API management receiving 503 on IP-firewalled cosmos DB endpoints?

Question

I configured my cosmosDB instance's firewall to only allow requests from Azure datacenter resources. I even added my API management IP address manually.

My findings so far:

• When configuring the firewall not to allow ANY requests over public internet, I do get the regular error where the firewall doesn't allow requests over public internet etc..
• When I configure that same firewall to allow all IP addresses, everything works fine, it seems like this service error only is returned when the IP is allowed to make the request, but there is network filtering active. When configured like this, my local machine (which is not whitelisted) just gets the IP filtering error, so this only happens when te request goes through APIM.
• The error I receive is as follows:

I already got this working in the past on another project, so I don't see why this is happening now.

As a sidenote, I didn't use a VNET with private endpoint because of the cost of adding the API management (and the in basic tier).

I really hope someone can help me with this as I've been staring myself blind

Answer 1

H Kjell maekelberg,

I would recommend you to please file a support ticket for deeper investigation and in case if you don't have a support plan, do let us know here so that we can check on other options to unblock you.

Thanks