We have a scenario where our Storage account inside VNet to restricted to specific public IP range Access. How to allow access to this Storage account inside VNet? Should we create App Service? How to allow access via VNet?
We have a scenario where our Storage account inside VNet to restricted to specific public IP range Access. How to allow access to this Storage account inside VNet? Should we create App Service? How to allow access via VNet?
2
Answers
In order to do this, please select your storage account and Networking settings
After this choose – Enabled from selected virtual networks and IP addresses
And finally, add your vnet by clicking on "Add existing virtual network"
Plus you can set up Firewall settings there as well
Hope that will help you
As Venkat correctly pointed out, in order to allow IP-based access to a Storage Account inside a VNet in Azure, you can configure network rules to grant access to traffic from specific virtual networks and public IP address ranges. You can also add exceptions to allow access from trusted services required for operations such as backing up data and logging and metrics.
Follow below steps-
If you are creating a new storage account, then select enable network access from selected virtual network and IP
If storage account already created, modify the same under the networking tab like this to allow the specific IP to the storage account.
For example before enabling this option under networking -> Firewall I was not able to access the container
after adding the public IP under firewall settings, I can access the storage container from my local machine.
References: