Resolving 403 Error When Copying Blob Using AzCopy

Question

How can I resolve a 403 error when copying a blob from one Azure Storage account to another using AzCopy?
 "PS - Based on common issues that we have seen from customers and other sources, we are posting these questions to help the Azure community.""

Answer 1

Greetings!

The 403 error occurs because the copy blob request is coming from an unauthorized IP address, which is not permitted to access the destination storage account. This typically happens due to improper networking configuration on the destination storage account. To resolve this issue, follow these steps:

1. Verify Networking Configuration: Ensure that the networking settings of the destination storage account allow access from the source IP address. This can involve checking the firewall rules, virtual network settings, and any service endpoints configured.
2. Adjust Firewall Rules: If the destination storage account has a firewall enabled, make sure to add the source IP address to the allowed list.
3. Check Virtual Network Settings: If the storage account is restricted to certain virtual networks, ensure that the source IP address falls within one of these networks.

4.Ensure Proper Authentication: Verify that you are using the correct authentication method and that the credentials (SAS tokens, access keys, or Azure AD) have the necessary permissions to access the destination storage account.

5. Refer to Documentation: For detailed guidance on configuring Azure Storage firewalls and virtual networks, refer to the official documentation.

After making the necessary configuration changes, retry the blob copy operation. This should resolve the 403 error and allow the files to be copied successfully.

Resources:

• Configure Azure Storage firewalls and virtual networks
• Blob rehydration from the archive tier

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

Please do not forget to "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.