question

braxx avatar image
0 Votes"
braxx asked VaishakhiSavaria-7611 answered

Data Factory Link Service connection failed (403)

Keep getting the error when creating a link service to blob storage:

 Fail to connect to https://xxxx.blob.core.windows.net: Error Message: The remote server returned an error: (403) Forbidden. (ErrorCode: 403, Detail: This request is not authorized to perform this operation., RequestId: 8e1d71d6-001e-000a-1e7f-c134a2000000), make sure the credential provided is valid.
 The remote server returned an error: (403) Forbidden.StorageExtendedMessage=,
 The remote server returned an error: (403) Forbidden.
 Activity ID: 2b87d7c0-49fa-4a2e-9e7c-db09c0fa651e.
 This may happen if your data source only allows secured connections. If that's the case, please use a VNet integration runtime

41853-capture22.png

VM with IR installed has been listed in a firewall's settings of the blob.
Sas token is like: ?sv=2019-12-12&ss=bf&srt=c&sp=rlc&se=2021-06-29T22:37:40Z&st=2020-09-24T14:37:40Z&spr=https&sig=xxxxxxx

Have no idea what stays behind this error.
Hope someone advice how to fix it.





azure-data-factory
capture22.png (65.1 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HimanshuSinha-MSFT avatar image
0 Votes"
HimanshuSinha-MSFT answered

Hello @BartoszWachocki-4076 ,

Thanks for ask and using the forum .

Please make sure that the the SAS is having access to the container

41937-11.png

Lets generate the SAS token

42022-12.png

and use the token in ADF

42051-13.png


Let me know how it goes .

Thanks
Himanshu



11.png (34.0 KiB)
12.png (7.2 KiB)
13.png (10.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

braxx avatar image
1 Vote"
braxx answered madforchili commented

There is already an access granted to a container. It is mentioned in a first part of a token in a parameter: srt=c
It finally turned out that the access for VM with IR was not granted properly, so it was not able to connect to the storage.
I should have checked it before. Sorry for misleading in the previous post.
Adding this properly to the firewall settings of a blob storage solved the issue.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @braxx,

Glad to know that the issue is resolved . You also did great in sharing the resolution as it will help other community members .

Thanks
Himanshu

0 Votes 0 ·

Hi, you mentioned that the access for VM with IR was not granted properly. Please show how exactly did you grant access VM with IR.

0 Votes 0 ·

I have similar issue, Linked service to Azure File Storage, using Access Key to storage account.

I am curious with when you say access for VM with IR was not granted properly, could you explain it with more details. so i can check if it helps

0 Votes 0 ·
VaishakhiSavaria-7611 avatar image
0 Votes"
VaishakhiSavaria-7611 answered

If the same error appears when trying to access at a Container level, you would need to go to that particular Container, select Shared Access tokens -> Permissions. By selecting the desired permissions and regenerating the SAS token, the issue should resolve

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.