This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 25%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Hi,
I have created SFTP from https://learn.microsoft.com/en-us/samples/azure-samples/sftp-creation-template/sftp-on-azure/. Without any setting i´m able to start the container and also reach the fileshare via Filezilla. But when I try to set network settings like - I want to have access to the fileshare just from our on-prem + specific public IP i´m not able to start container with error message
Failed to start the container group 'xxx'. Error: The Azure storage account 'axx' in volume 'sftpvolume' can't be accessed: 'The remote server returned an error: (403) Forbidden.'. This can be caused by incorrect Azure storage account key or Azure storage firewalls.
Is there any setting what i should set to allow Storage Account access to Container?
Thank you
Hello @Gold, Petr : Is there a Private Endpoint configured for the Storage Account or any other firewall policy, if the Storage Account is restricted for a Public Access then you need to authenticate SFTP to access Storage
Hello @Pratik Somaiya
No EndPoints had been configured. Regarding the settings on firewall - Yes, i have a configuration that only "Selected networks" can connect to storage account. After this setting container cannot be started with error above. Then what exactly setting i should set up to a allow container to connect to storage account? I couldn´t find anything what can help me.
Thank you