Azure Question posted in
The official documentation to get you started can be found here.

Azure Redis import: "Not Found. There was no storage account called '<redacted>' in the Azure region 'Brazil South'"

Our automated Redis import started failing with this message:

Not Found. There was no storage account called '<redacted>' in the Azure region 'Brazil South'.

Our process is as follows:

  1. Generate a SAS url:
    sas_url=$(az storage blob generate-sas 
                 -o tsv 
                 --account-name $AZ_ACCOUNT_NAME 
                 --account-key $AZ_ACCOUNT_KEY 
                 --container-name $AZ_CONTAINER_NAME 
                 --name db 
                 --permissions r 
                 --start $(date_plus_minutes -20) 
                 --expiry $(date_plus_minutes 120) 
                 --full-uri)
  1. Login with service principal:
    az login 
       --service-principal 
       -u $AZ_SP_ID 
       -p $AZ_SP_PASS 
       --tenant $AZ_SP_TENANT
  1. Import:
    az redis import 
       --ids $REDIS_ID 
       --files $sas_url

The Redis server and the storage account are in the same subscription and resource group.

The process works if I start the import from the web interface, and it also worked from the command-line when I used my account instead of the service principal.

I verified that when logged in as the service principal, az storage account list does not list the storage account (even though the service principal has the Storage Blob Data Contributor role in that account), but I’m not sure that it matters – the SAS token should grant access to users who wouldn’t ordinarily have access, right? I have confirmed that by opening the URL and was able to download the file even when not logged in to Azure.

One thing I noticed is that in the web interface the Redis server is listed as "Location: Brazil South" and the storage account as "Location: brazilsouth". I’m not sure this is relevant, however, given that I was able to upload from the command line with a regular user.

Tags:

2

Answers


  1. Chosen as BEST ANSWER
    0

    This was solved by adding the 'Reader' role to the service principal in the storage account. (Thanks to a commenter that has deleted his comment, however.)


  2. 0

    One thing I noticed is that in the web interface the Redis server is listed as "Location: Brazil South" and the storage account as "Location: brazilsouth". I’m not sure this is relevant, however, given that I was able to upload from the command line with a regular user.

    In my environment, I created both storage account and Redis cache in same location(brazilsouth), same resource group and same subscription.

    Portal:

    enter image description here

    Now, I assign the service principal both contributor role and storage blob data contributor role to the storage account.

    Portal:

    enter image description here

    Now, you can run the same command it will import the blob the from the storage account.

    Command:

    az login --service-principal -u "xxx" -p "xxx" --tenant "xxx"

az redis import --ids "/subscriptions/xxx/resourceGroups/xxx/providers/Microsoft.Cache/Redis/xxx" --files  "https://venkat98012.blob.core.windows.net/venkat/test" --debug

    Reference:

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search