Problem accessing event hub using azure function when hub has "Selected networks" on

Question

I had this azure function pulling events from azure hub but was requested to secure with "Selected networks".

I've added a list of IP addresses including the azure functions' IP to the vault and to the azure event hub and that worked. but when I do the same to the storage, it won't work

the azure function uses a trigger to pull events from the hub and i believe it needs the storage because it uses event jobs.

Any suggestions?

Answer 1

@Joe White ,

Thanks for reach out to us.

The below settings needs to be added at the Function app settings if you would like to add network restriction to the storage account. Additionally service endpoints has to be enabled for Storage account. Please refer this article for more details :

https://learn.microsoft.com/en-us/azure/azure-functions/configure-networking-how-to#restrict-your-storage-account-to-a-virtual-network

WEBSITE_CONTENTOVERVNET = 1.
WEBSITE_VNET_ROUTE_ALL = 1.
WEBSITE_DNS_SERVER =168.63.129.16 (applicable when you are using Azure DNS)

Please take a look at this article, if you would like to know about the above app settings : https://learn.microsoft.com/en-us/azure/azure-functions/functions-app-settings

Apart from the details that you mentioned, Azure function uses Storage account to store the source code, app secrets and keys. So it is critical for a function app to be able to reach the storage account.

I hope this helps!

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.