Logic App Unable to connect to storage account over private endpoints

Question

I'm not sure if this is a Microsoft problem or overall , but our logic apps when deployed using terraform cannot talk to storage account and the only way we get that to work is if we delete the logic app with its private endpoint manually and create it manually. it is silly because if it is a network integration problem , they are not supposed to connect after deleting and creating. maybe we missing something , not sure

Answer 1

Hello @Will

Welcome to Microsoft QnA!

Let's get to the bottom of this

When you do that via Terrafrom, are you creating the Service Endpoint as well ?

Are you creating the Private DNS Zone ? Here is a sample that works

# Private DNS

resource "azurerm_private_dns_zone" "blobzone" {

name = "privatelink.blob.core.azure.com"

resource_group_name = azurerm_resource_group.rgdemo.name

}

resource "azurerm_private_endpoint" "blobprv" {

location = azurerm_resource_group.rgdemo.location

name = "spriv${random_string.str-name.result}"

resource_group_name = azurerm_resource_group.rgdemo.name

subnet_id = azurerm_subnet.snetdemo.id

private_dns_zone_group {

name = "default"

private_dns_zone_ids = [azurerm_private_dns_zone.blobzone.id]

}

private_service_connection {

is_manual_connection = false

name = "storpriv"

private_connection_resource_id = azurerm_storage_account.storage.id

subresource_names = ["blob"]

}

}

--

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Hi @Will Greetings! Welcome to Microsoft Q&A forum. Thank you for posting this question here.

There is a limitation identified by the product team which prevents using of Terraform with a Standard logic app resource for complete infrastructure deployment. This could be the reason why you are experiencing this behavior.

The following is the limitation logged in the documentation Limitations of Standard Logic App.

Hope this answers your question.

---

If the response helped, please do click Accept Answer and Yes for the answer provided. Doing so would help other community members with similar issue identify the solution. I highly appreciate your contribution to the community.