skip to Main Content

We have a scenario where our Storage account inside VNet to restricted to specific public IP range Access. How to allow access to this Storage account inside VNet? Should we create App Service? How to allow access via VNet?

2

Answers


  1. In order to do this, please select your storage account and Networking settings

    Networking

    After this choose – Enabled from selected virtual networks and IP addresses

    Enabled from selected virtual networks and IP addresses

    And finally, add your vnet by clicking on "Add existing virtual network"

    Add existing virtual network

    existing virtual network settings

    Plus you can set up Firewall settings there as well
    Firewall settings

    Hope that will help you

    Login or Signup to reply.
  2. As Venkat correctly pointed out, in order to allow IP-based access to a Storage Account inside a VNet in Azure, you can configure network rules to grant access to traffic from specific virtual networks and public IP address ranges. You can also add exceptions to allow access from trusted services required for operations such as backing up data and logging and metrics.

    Follow below steps-

    If you are creating a new storage account, then select enable network access from selected virtual network and IP

    enter image description here

    If storage account already created, modify the same under the networking tab like this to allow the specific IP to the storage account.

    enter image description here

    For example before enabling this option under networking -> Firewall I was not able to access the container

    enter image description here

    after adding the public IP under firewall settings, I can access the storage container from my local machine.

    enter image description here

    References:

    Login or Signup to reply.
Please signup or login to give your own answer.
Back To Top
Search