Logic App Azure Table Storage Access

Question

I created a logic app which gets triggered by a recurring job, retrieves all table storage entities and copies them to another table storage.

The storage account uses private endpoints and is secured by using restricted network access. The logic app is not able to access the storage account as long as it is restricted. If I allow all network, then it works. It does not work, even if I use "Allow Azure services on the trusted services list to access this storage account". I read the logic app cannot be in the same region and access a storage account behind a firewall. The alternative is to create the logic app in different region and allow the whole IP range of that region. It is hard to belive that this really is the workaround provided by microsoft, is this still the case?

We have sensitve data on that storage account and have to secure it. Furthermore, I'm not allowed to create the logic app in another region than the storage account (company rules).
What are my options?

Answer 1

What type of Logic App are you using?
Standard Logic apps can run in Azure ARC enabled servers or App Service Environment allowing for integrated support for virtual networks and private endpoints. I have run logic apps in fully isolated environments, similar to what you are trying to achieve.
https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-overview#resource-environment-differences

P.S. Prior to the standard logic apps, the Consumption mode could run in integrated service environments, which achieved similar results, though much more costly/