[error]Access Restrictions - Access to the "AzureWebJobsStorage" Storage Account resource is restricted.

Question

Function app deployed using Arm template.Template deployed but facing below error and function is also not available under function app.Function App is consumption plan so unable to configure Vnet.Please help me to resolve the issue.Do we need to configure Vnet to deploy function app

##[error]Access Restrictions - Access to the "AzureWebJobsStorage" Storage Account resource is restricted. This can be due to firewall rules on the resource. Please check if you have configured firewall rules or a private endpoint and that they correctly allow access from the Function App. Relevant documentation: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal

Exception encountered while connecting: Key based authentication is not permitted on this storage account.
2025-01-16T10:34:41.7908601Z NOTE: Function app is NOT VNet integrated.
2025-01-16T10:34:41.7910459Z ##[error]Error: Networking validation for the Function app and Storage account has failed. Please review all error messages.

Answer 1

Hello @Usha peddireddi

Based on the error message, it seems that the issue is related to the access restrictions on the AzureWebJobsStorage storage account resource.

The error message you show here suggests that this could be due to firewall rules on the resource.

To resolve this issue, you need to check if you have configured firewall rules or a private endpoint and that they correctly allow access from the Function App.

You can refer to the following documentation for more information on storage network security: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal 

Regarding your question about VNet integration, it is not necessary to configure VNet to deploy a function app.

However, if you want to use your function app with virtual networks, you need to join it to a subnet. You can refer to the following documentation for more information on how to use private endpoints to integrate Azure Functions with a virtual network: 

https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-vnet 

I hope this helps further in your journey