Function app unable to access storage account after adding firewall protection

Question

I want to add firewall to my storage account. The function app refers to the protected storage account which has enabled for restricted ip address access. I have added function app's outbound and inbound ip address in storage still function app is unable to access the storage account. The code and env files of my function app are stored in storage account during deploying the function app however the function app service is unable to access them later on leading to errors.

Note - I do not want to use VNet as it will change my project's entire infra. My use case is to protect the storage account only using firewall and restrict it to be accessed by specified IP addresses.

Any help regarding firewalls and storage account access properties is appreciated.

Thanks in advance!

Answer 1

Hello @Aditi Mokashi

One thing you can check is whether the storage account firewall is configured to allow traffic from the region where your function app is located. If your function app is located in a different region than your storage account, you need to add the outbound IP addresses of your function app to the storage account firewall rules for the region where your function app is located.

Another thing you can check is whether the storage account connection string in your function app is correct. You can find the storage account connection string in the AzureWebJobsStorage application setting.

Make sure that the connection string is updated with the latest storage account key. If you have already checked these things and are still unable to access the storage account, you can try enabling diagnostic logging for your function app.

This will help you identify any errors that might be occurring when your function app tries to access the storage account.

To enable diagnostic logging, you can follow the steps mentioned in the following document: Enable diagnostics logging.

---

I hope this helps.