Error deploying storage account diagnostic setting using ARM template

Question

Error deploying storage account diagnostic setting using ARM template

Anonymous

Hi,
I'm trying to deploy diagnostic settings for Azure storage using ARM templates following https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/resource-manager-diagnostic-settings#diagnostic-setting-for-azure-storage.
Following is the snippet of the resource block:

{  
"type": "Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticsettings",  
                            "apiVersion": "2017-05-01-preview",  
                            "name": "[concat(parameters('storageAccountName'),'/default/Microsoft.Insights/', parameters('settingName'))]",  
                            "properties": {  
                                "storageAccountId": "[parameters('archiveStorageId')]",  
                                "logs": [  
                                    {  
                                        "category": "StorageRead",  
                                        "enabled": true  
                                    },  
                                    {  
                                        "category": "StorageWrite",  
                                        "enabled": true  
                                    },  
                                    {  
                                        "category": "StorageDelete",  
                                        "enabled": true  
                                    }  
                                ]  
 }

However, I'm getting the following error for all storage types:

The resource type could not be found in the namespace 'Microsoft.Storage' for api version '2017-05-01-preview'

Sumarigo-MSFT 47,531 Reputation points Microsoft Employee Moderator

2022-06-01T16:57:34.67+00:00

@Anonymous , Just checking in to see if the above answer helped. If this answers your query, do click and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

<<Private message note: This is a private message which only you as Original Poster and Microsoft Moderators can view. Please respond directly to this comment to privately share the requested information. For your privacy, please do not share any Personal Identifiable Information (PII) as a public or private comment. All the private messages on the platform will be deleted on periodic basis>>

Jeff 1

This is not working for me. I keep getting this error:

{
    "status": "Failed",
    "error": {
        "code": "Conflict",
        "message": "Storage account '/subscriptions/{subscriptionid}/resourcegroups/myResourceGroup/providers/microsoft.storage/storageaccounts/myStorageAccount' is not accessible yet. Try again when storage provisioning is complete."
    }
}

Here is my ARM template:

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "storageAccountName": {
            "defaultValue": "",
            "maxLength": 20,
            "metadata": {
                "description": "Must be less than or equal to 20 characters to avoid maximum storage account name size validation errors."
            },
            "type": "string"
        },
        "environment": {
            "defaultValue": "systest",
            "allowedValues": [
                "systest",
                "qa",
                "uat",
                "prod"
            ],
            "type": "string"
        },
        "abbreviatedEnvironment": {
            "defaultValue": "st",
            "allowedValues": [
                "st",
                "qa",
                "uat",
                "prod"
            ],
            "metadata": {
                "description": "Must be less than 5 characters to avoid maximum storage account name size validation errors."
            },
            "type": "string"
        },
        "location": {
            "defaultValue": "eastus",
            "type": "string"
        },
        "createdByTag": {
            "defaultValue": "",
            "type": "string",
            "metadata": {
                "description": "Created by user or process."
            }
        },
        "applicationTag": {
            "defaultValue": "",
            "type": "string",
            "metadata": {
                "description": "Application name tag."
            }
        },
        "purposeTag": {
            "defaultValue": "",
            "allowedValues": [
                "Function App Storage Account",
                "Logic App Storage Account",
                "General Purpose Storage Account"
            ],
            "type": "string",
            "metadata": {
                "description": "Storage Account Purpose. Use 'Function App Storage Account' or 'Logic App Storage Account' to host Function or Logic Application files."
            }
        },
        "dateCreatedTag": {
            "defaultValue": "",
            "type": "string",
            "metadata": {
                "description": "Creation Date Tag value."
            }
        },
        "owner": {
            "type": "string",
            "metadata": {
                "description": "Project Sponsor or Development Team"
            }
        }
    },
    "variables": {
        "storageAccountName": "[concat(parameters('storageAccountName'),parameters('abbreviatedEnvironment'))]",
        "privateEndpoints": [
            {
                "name": "[concat('pe-',variables('storageAccountName'),'-blob')]",
                "storageTypeName": "blob"
            },
            {
                "name": "[concat('pe-',variables('storageAccountName'),'-file')]",
                "storageTypeName": "file"
            },
            {
                "name": "[concat('pe-',variables('storageAccountName'),'-queue')]",
                "storageTypeName": "queue"
            },
            {
                "name": "[concat('pe-',variables('storageAccountName'),'-table')]",
                "storageTypeName": "table"
            },
            {
                "name": "[concat('pe-',variables('storageAccountName'),'-web')]",
                "storageTypeName": "web"
            },
            {
                "name": "[concat('pe-',variables('storageAccountName'),'-dfs')]",
                "storageTypeName": "dfs"
            }
        ],
        "diagnosticSettings": [
            "blob",
            "file",
            "table",
            "queue",
            "web",
            "dfs"
        ],
        "vnetName": "[concat('vnet-',parameters('environment'),'-01')]",
        "storageSubnetName": "[concat('subn-storage-',parameters('environment'))]",
        "networkAndSecuritySubscriptionId": "{mySubcriptionID}",
        "vmssagentpoolvnetId": "[resourceId(variables('networkAndSecuritySubscriptionId'),'vmssagents-rg-shared','Microsoft.Network/virtualNetworks','vmssagentpoolVNET')]",
        "vnetResourceGroup": "[concat('rg-net-',parameters('environment'))]",
        "tags": {
            "Creation Date": "[parameters('dateCreatedTag')]",
            "Created By": "[parameters('createdByTag')]",
            "Application": "[parameters('applicationTag')]",
            "Purpose": "[parameters('purposeTag')]",
            "Owner": "[parameters('owner')]"
        },
        "location": "[parameters('location')]",
        "corpLoggingWorkspaceId": "[resourceId(variables('networkAndSecuritySubscriptionId'),'rg-logging','microsoft.operationalinsights/workspaces','corp-logging')]"
    },
    "resources": [
        {
            "type": "Microsoft.Storage/storageAccounts",
            "apiVersion": "2022-05-01",
            "name": "[variables('storageAccountName')]",
            "location": "[variables('location')]",
            "tags": "[variables('tags')]",
            "sku": {
                "name": "Standard_LRS",
                "tier": "Standard"
            },
            "kind": "StorageV2",
            "properties": {
                "dnsEndpointType": "Standard",
                "allowedCopyScope": "PrivateLink",
                "defaultToOAuthAuthentication": false,
                "publicNetworkAccess": "Enabled",
                "networkAcls": {
                    "resourceAccessRules": [],
                    "bypass": "AzureServices",
                    "virtualNetworkRules": [
                        {
                            "id": "[concat(variables('vmssagentpoolvnetId'), '/subnets/vmssagentpoolSubnet')]",
                            "action": "Allow",
                            "state": "Succeeded"
                        }
                    ],
                    "ipRules": [],
                    "defaultAction": "Deny"
                },
                "allowCrossTenantReplication": false,
                "minimumTlsVersion": "TLS1_2",
                "allowBlobPublicAccess": false,
                "allowSharedKeyAccess": true,
                "allowCrossTentantReplication": false,
                "supportsHttpsTrafficOnly": true,
                "encryption": {
                    "services": {
                        "file": {
                            "keyType": "Account",
                            "enabled": true
                        },
                        "blob": {
                            "keyType": "Account",
                            "enabled": true
                        }
                    },
                    "keySource": "Microsoft.Storage"
                },
                "accessTier": "Hot"
            }
        },
        {
            "type": "Microsoft.Storage/storageAccounts/blobServices",
            "apiVersion": "2022-05-01",
            "name": "[concat(variables('storageAccountName'), '/default')]",
            "tags": "[variables('tags')]",
            "dependsOn": [
                "[resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName'))]"
            ],
            "sku": {
                "name": "Standard_LRS",
                "tier": "Standard"
            },
            "properties": {
                "cors": {
                    "corsRules": []
                },
                "deleteRetentionPolicy": {
                    "allowPermanentDelete": false,
                    "enabled": true,
                    "days": 7
                },
                "isVersioningEnabled": false,
                "changeFeed": {
                    "enabled": false
                },
                "restorePolicy": {
                    "enabled": false
                },
                "containerDeleteRetentionPolicy": {
                    "enabled": true,
                    "days": 7
                }
            }
        },
        {
            "type": "Microsoft.Insights/diagnosticSettings",
            "apiVersion": "2021-05-01-preview",
            "name": "corp-loggingchanged",
            "scope": "[concat('Microsoft.Storage/storageAccounts/',variables('storageAccountName'),'/blobServices/corp-logging')]",
            "tags": "[variables('tags')]",
            "location": "[variables('location')]",
            "dependsOn": [
                "[resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName'))]",
                "[resourceId('Microsoft.Storage/storageAccounts/blobServices', variables('storageAccountName'),'default')]"
            ],
            "properties": {
                "logs": [
                    {
                        "category": "StorageRead",
                        "enabled": true
                    },
                    {
                        "category": "StorageWrite",
                        "enabled": true
                    },
                    {
                        "category": "StorageDelete",
                        "enabled": true
                    }
                ],
                "workspaceId": "[variables('corpLoggingWorkspaceId')]",
                "storageAccountId": "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccountName'))]"
            }
        }

    ]
}

Any help would be appreciated!!

1 answer

Your answer

Sumarigo-MSFT 47,531 Reputation points Microsoft Employee Moderator

2022-06-01T16:57:34.67+00:00

@Anonymous , Just checking in to see if the above answer helped. If this answers your query, do click and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

<<Private message note: This is a private message which only you as Original Poster and Microsoft Moderators can view. Please respond directly to this comment to privately share the requested information. For your privacy, please do not share any Personal Identifiable Information (PII) as a public or private comment. All the private messages on the platform will be deleted on periodic basis>>

Answer 1

shiva patpi 13,366 Microsoft Employee Moderator

Hello @Anonymous ,
I just tried the exact same template mentioned at https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/resource-manager-diagnostic-settings#diagnostic-setting-for-azure-storage.
and it went through successfully.

Please find the attached template & Parameters file

[199767-enablestoragediag.txt]
Command used:
az group deployment create -g resourcegroupname --template-file .\enablestoragediag.json --parameters .\parameters.json

199878-parameters.txt

Share via

Error deploying storage account diagnostic setting using ARM template

1 answer

Your answer