Unable to deploy a standard logic app using a private storage account

vnet007 0 Reputation points
2024-08-01T20:34:35.24+00:00

According to the official msft docs

"This deployment method requires that temporary public access to your storage account. If you can't enable public access due to your organization's policies, you can still deploy your logic app to a private storage account. However, you have to deploy with an Azure Resource Manager template (ARM template), which is described in a later section."

So I need to use an arm template since my org disabled public access. I looked at the provided Arm template but this template is for creating all resources like vnets subnets, storage accounts from scratch. I want to create a standard logic app, provided I already have a storage acc/private endpoint, vnet, subnet, created.

I went into the azure portal to create a fresh logic app and filled in the following: resource group, logic app name, region, standard plan type, WS1 pricing, selected my storage account, no diagnostic settings, enable public access off, network injection on, selected my virtual network, set private endpoints to off, outbound access to on, selected my subnet, enabled application insights, set my tags. Finally I clicked the option to generate an arm template. (These steps should be able to be replicated by anyone)

The main thing I added was 'WEBSITE_VNET_ROUTE_ALL' and 'WEBSITE_CONTENTOVERVNET' to the generated template as per this site and various other sites. Without these two fields, the deployment will not succeed and you will get a 403 forbidden, due to the storage account being private. With these two fields the deployment succeeds. However, the logic app isn't working as expected as you can see below. (First image is from overview blade)

User's image

User's image

Is there something wrong with the generated template? Can the template in the msft docs be modified for what I want to do? What should I do in my situation?

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
3,542 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.