Share via

Azure blob Storage as linked service in Azure data factory not able to connect using SAS URI .

amarjeet singh 6 Reputation points
2021-12-23T13:18:51.473+00:00

I am the owner of the account and I have all permissions on all the services created. I have created a Storage Account and an Azure data factory service. I am trying to migrate some data from Azure SQL Server to Snowflake. In order to do the same, I am using copy in the pipeline. I have configured the Source and sink ( already created the linked services for Azure SQL server and snowflake). But while validation it says you got to have Blob storage. So I created Azure Blob storage service and tried to link it under settings (Enable Staging) but while connecting using SAS URI, I have created a new SAS URI and tried to copy-paste but got below error :

Fail to connect to https://perfxx001.blob.core.windows.net/: Error Message: The remote server returned an error: (403) Forbidden. (ErrorCode: 403, Detail: This request is not authorized to perform this operation., RequestId: 0b094dcd-f01e-0011-4efd-f73b49000000), make sure the credential provided is valid. The remote server returned an error: (403) Forbidden.StorageExtendedMessage=RequestId:0b094dcd-f01e-0011-4efd-f73b49000000 Time:Thu, 23 Dec 2021 13:06:02 GMT, The remote server returned an error: (403) Forbidden. Activity ID: 6d369270-5b2a-47d3-9b8a-7e16448e8078.

Azure SQL Database
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
3,192 questions
Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
11,624 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. amarjeet singh 6 Reputation points
    2021-12-24T07:20:06.817+00:00

    I think I have found what was wrong while creating SAS URI. I was putting my IP in the section: "Allowed IP addresses". After many tries, I figured it out.
    Closing thread !! Thanks, guys !!

    1 person found this answer helpful.
  2. Alberto Morillo 34,671 Reputation points MVP Volunteer Moderator
    2021-12-23T20:56:03.37+00:00

    403 is seen when authorizing with a shared key because "All authorized requests must include the Coordinated Universal Time (UTC) timestamp for the request." Information about this can be found in Authorize with Shared Key.The storage services ensure that a request is no older than 15 minutes by the time it reaches the service. This guards against certain security attacks, including replay attacks. When this check fails, the server returns response code 403 (Forbidden).

    Make sure you connect from ADF to Azure Storage Account as a trusted service as explained here.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.