How to connect Storage Account to Function App without enabling public access?

Question

I have an Azure Function which runs daily and stores data into the Azure Storage Account. Recently, I had to disable the public network access to the storage account and allow any selected virtual network and IP addresses. This caused the Function app not being able to run because it could not access the storage account. It works fine if I allow public access but when I restrict the access to only selected IP's, it stops working and I am unable to connect to the storage account. The error I am getting is This request is not authorized to perform this operation.

Answer 1

Hello @Aayush Suresh Jain

Welcome to Microsoft Q&A Platform,

Have tried enabling private endpoint for the storage account?
Please check the article below on how to do it, please pay special attention to the requirements:

https://techcommunity.microsoft.com/t5/apps-on-azure-blog/secure-storage-account-linked-to-function-app-with-private/ba-p/2644772

I hope this helps!

----------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

What plan is your function app?

The premium plan and above will allow you integrate your Function App with a vnet, from there you can use a service or private endpoint to connect to your storage account with the firewall enabled.

This should explain more: https://learn.microsoft.com/en-us/azure/azure-functions/functions-networking-options?tabs=azure-cli

Answer 3

Hi @Aayush Suresh Jain ,

Similar issue was reported in the following discussion thread, it is for private link though. However, the concept of choosing the selected network in the storage account and integrating with Functions would be the same. The configuration of the function app is also mentioned. Please take a look and let me know the outcome.

https://learn.microsoft.com/en-us/answers/questions/842550/function-app-to-write-data-to-storage-account-with.html?childToView=843339#answer-843339

Answer 4

@Luis Rodriguez @Cormac @MughundhanRaveendran-MSFT Hello All, turns out I didn't enable the VNet Integration on My Function App in the networking tab. Turning that on worked for me. Thanks for your help , these articles were really helpful.