Unable to create a connection to a storage account behind firewall

Question

I created a consumption logic app, from there I am unable to create a connection to a storage account behind firewall at the same region. I have "Storage Account Data Contributor" permission.

But every time I click "Create" and got the error below:

The storage account setting as "Allow access from --> Selected networks" && "Exceptions --> Allow trusted Microsoft services to access this storage account".

Can you tell what I missing? Thank you!

Answer 1

Hi @Betty Xu (Yun) (202) Thanks for reaching out. In order to access storage account in same region you need to enable system managed identities of Logic app to access through using connectors
please refer the below document for necessary steps

reference article: https://learn.microsoft.com/en-us/azure/connectors/connectors-create-api-azureblobstorage?tabs=consumption#access-storage-accounts-behind-firewalls
https://learn.microsoft.com/en-us/azure/connectors/connectors-create-api-azureblobstorage?tabs=consumption#access-blob-storage-in-same-region-with-system-managed-identities

Please let me know incase of further queries, I would be happy to assist you.