Error while creating the storage account

Question

question

HanamantSMalakagond-5340 asked May 9, '22 SumanthMarigowda-MSFT commented May 16, '22

Error while creating the storage account

I have existing Subscription(AAA) ,Keyvault(BBB) - created new KEY (CCC) for keyvault BBB .
I have created managed identity(DDD) and assigned Owner role for subscription(AAA) and administrative privilege's to the keyvault(BBB).
I am creating new storage account with Encryption type as "Customer-Managed keys(CMK)"& selected keyvault BBB & key CCC for "Keyvault and key" option & selected Managed identity (DDD) for user assigned identity.
When I click on create i am getting "The operation failed because of authentication issue on the keyvault" error message anything missing here ?

azure-storage-accounts azure-key-vault

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-05-10T13:16:46.22Z

SumanthMarigowda-MSFT answered May 10, '22 SumanthMarigowda-MSFT commented May 16, '22

@HanamantSMalakagond-5340 Welcome to Microsoft Q&A Forum, Thank you for posting your query here.

For better understanding the issue: can you please provide the more information on your query.

Can you please share the screenshot of the error message?
I assume you are creating the azure storage account through Portal am correct? (ARM, Powershell, CLI and more)?
Can you also check have provided Azure Storage contributor role access in Access control (I AM) *([Key vault )][2]

Please refer to this thread, which provides some idea on your query

How-to use customer-managed keys with Azure Key Vault and Azure Storage encryption using ARM Template

Key Vault :RBAC permission model will not work with CMK for storage account encryption. The recommendation is to make use of the Access Policies permission model

Looking forward for your reply

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

[2]: https://docs.microsoft.com/en-us/azure/key-vault/general/security-features

screenshot-2021-12-10-121802.png (1.4 KiB)

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HanamantSMalakagond-5340 · May 11 at 03:37 AM

I Didn't added access policies for my user managed identity so that's what causing this problem. Post providing the access it's resolved thank you.

0 ·

SumanthMarigowda-MSFT HanamantSMalakagond-5340 · May 16 at 11:23 AM

@HanamantSMalakagond-5340 Glad to know that issue got resolved, can you Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

0 ·

screenshot-2021-12-10-121802.png (1.4 KiB)

question