403 error acess from DevtestLab to AzureBlob

BESSY-ROLAND Yannick 6 Reputation points
2022-08-03T13:26:20.787+00:00

Hello,

I'm using R code to acess (read, upload etc..) Azure containers. It works using my local desktop.
However when using the same code from a DevtesLab I obtain a 403 unauthorized access :

Error in process_storage_response(response, match.arg(http_status_handler), :
Forbidden (HTTP 403). Failed to complete Storage Services operation. Message:
AuthorizationFailure
This request is not authorized to perform this operation.
RequestId:59c2503c-701e-007a-413a-a71df8000000
Time:2022-08-03T13:08:35.1995785Z.

I've tried using an access key and a SAS key, both don't work.

I also added the IP of the devtesLab in the firewall rules in the Azur account.

What else can I try?

Azure DevTest Labs
Azure DevTest Labs
An Azure service that is used for provisioning development and test environments.
260 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,528 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. SaiKishor-MSFT 17,216 Reputation points
    2022-08-03T22:24:10.457+00:00

    @BESSYROLANDO Thanks for reaching out to Microsoft Q&A.

    I understand that you have issues with Authorization from different source when using the same code works from a local computer. Please let me know the following:

    • If you allow access from anywhere, does this issue persist?
    • If that works, can you confirm that there is no proxy/firewall in front of the DevtesLab that may be changing the source IP the request is originating from? Please check this and confirm the right IP is in place.
    • If using Account Access key or User SAS, please make sure that the right Azure Roles are assigned when accessing from the DevtesLab.

    Please check the permissions required when using Account Access Key with RBAC- https://learn.microsoft.com/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal

    Please let me know. Thank you!

    0 comments No comments