azure web app app ip adress

Question

I have a azure storage account with firewall setting enabled to allow only specific ip adress.
now i have azure web app and web job and from these i am connecting to the storage account to create delete blobs using connection string.but since storage account needs IP adress of the web app to access it am not able to do so .
i have tried using inbound and outbound ip adress from web app properties those are not working.

Answer 1

Unfortunately using the storage account firewall to allow access from a web does not work when they are both in the same region. Traffic from the web app goes to the storage account over the internal Azure network using IP's that you are not provided with (and that will change).

If you want to secure a storage account for access from a web app you have a few options:

1. Join your Web App to a virtual network, then create a service endpoint or private link connection to the storage account attached to that virtual network. your web app traffic will be routed via the virtual network.
2. Use an App Service Environment instead of the PaaS Web App. This will be joined to a vNet and again route traffic that way, but is expensive