Resolving 403 Error During Blob Upload with Private Endpoints

Question

Why am I getting a 403 error when trying to upload a blob using the Put Blob operation on my storage account?

 "PS - Based on common issues that we have seen from customers and other sources, we are posting these questions to help the Azure community."

Answer 1

Greetings!

The 403 error you are encountering while trying to upload a blob using the Put Blob operation is due to the configuration of your Azure Storage account. Public access has been disabled on the storage account zuse2grccioxnpsos, and private access has been enabled via private endpoints. The request is coming from a public IP address, which is not permitted under the current security settings, resulting in the 403 error.

To resolve this issue, we temporarily added the public IP address to the Firewall IP address list, which allowed the upload operation to succeed. For a permanent solution, ensure that the client and the private endpoint are in the same Virtual Network (VNet). If the client is in a different VNet, you can peer the VNets and configure a Private DNS zone to ensure proper resolution.

Since your client is in an AWS VNet, consider using Azure Arc to project your non-Azure resources into Azure for better integration.

Resources:

• Use private endpoints - Azure Storage | Microsoft Learn
• Azure Arc overview - Azure Arc | Microsoft Learn

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

Please do not forget to"up-vote" wherever the information provided helps you, as this can be beneficial to other community members.