Cannot access the storage account with the given account key. Please verify that the account key is valid.

Question

Hi Azure ML Users, my model fails on the 2nd module with the error:
AzureMLCompute job failed.
BFSMountError: Unable to mount blob fuse file system
Info: Could not mount Azure Blob Container azureml-blobstore-547333bb-90a5-4a1c-b9a2-958870d93883 at workspaceblobstore: Unauthorized. Cannot access the storage account with the given account key. Please verify that the account key is valid.
Info: Failed to setup runtime for job execution: Job environment preparation failed on 10.0.0.5 with err exit status 1.

The only 2 things I did outside the Azure defaults was in creating the Azure ML workspace resource:

1. I created my own new Storage Account.
2. created my own Container Registry

I did this so that I could select the lowest priced type in setting up all my resources. Previously, my models ran from Designer, no issues. thank you.

And how do I run this a command?
"az ml workspace sync-keys -w myworkspace -g myresourcegroup" to sync up the key again

screen shot of storage account, showing ML worksspace has access.

Answer 1

@MikeRichardson-3493

i had the same problem .
By running az ml workspace sync-keys -w myworkspace -g myresourcegroup on your Azure cli works.
I had installed azure cli and used with microsoft Powershell.

Sources :
install azure cli : https://learn.microsoft.com/en-us/cli/azure/install-azure-cli
https://learn.microsoft.com/en-us/azure/machine-learning/how-to-change-storage-access-key

Answer 2

Hello,

Hope you have solved this issue. Please make sure you are using the account access key as account key in the setting page in portal.

You can find account key, SAS token, and service principal information on your Azure portal.

If you plan to use an account key or SAS token for authentication, select Storage Accounts on the left pane, and choose the storage account that you want to register.

The Overview page provides information such as the account name, container, and file share name.
For account keys, go to Access keys on the Settings pane.
For SAS tokens, go to Shared access signatures on the Settings pane.
If you plan to use a service principal for authentication, go to your App registrations and select which app you want to use.

Its corresponding Overview page will contain required information like tenant ID and client ID.

Please let us know if you still need help.

Regards,
Yutong