I cant access storage account from azure sql db without enabling allow trusted microsoft services on storage account.

Question

I cant access storage account from azure sql db without enabling allow trusted microsoft services on storage account.
Further storage account has firewall to enable access from selected network only.

Adding the public ip of the azure sql db does not work and it seems azure sql db shows up as a private ip when accessing the storage account service.

Answer 1

@Azhar-5280 You cannot use private IP to filter the traffic.
In certain scenarios Azure services/apps depend on other Azure services but they cannot be uniquely isolated through virtual network or IP address rules.
These cases are handled by the "Allow trusted Microsoft services..." setting.

Azure ensures strong authentication between these services.
You can read more about the internals here

Please let us know if have any specific concerns or requirements

--

If an answer is helpful, please "Accept the answer" and "Up-Vote" for the same which might be beneficial to other community members reading this thread.