Azure SQL Server无法访问Azure存储帐户 [英] Azure SQL Server Cannot Access Azure Storage Account

问题描述

我在Azure SQL数据库上运行漏洞评估时遇到问题。它无法连接到我的Azure存储帐户，因为存储帐户的防火墙设置除了我的两个IP地址外。

将存储帐户的防火墙设置为"所有网络"时，一切正常 - 我可以在SQL Server的高级数据安全性中设置存储帐户，然后成功运行漏洞评估。但是，当我将存储帐户的
防火墙设置为"选定网络"时（只允许我自己设置两个IP地址），SQL服务器无法再访问它，并且在尝试设置存储帐户和运行VAs时出现防火墙错误。

有没有办法将Azure服务器添加到防火墙中允许的列表中？我查看了Azure IP地址页面（无法添加链接，因为我的帐户显然未经验证），但只能找到"UK South"的IP地址。而我的
SQL服务器基于"UK West"。

任何想法？

解决方案

你好Ataraxia89，

对不起延迟回复！

你能解释一下环境有什么帮助吗？

此外，如果您设置为选定的网络，则表示无法连接到Azure存储帐户？

您是否在子网中添加了服务端点（Azure存储和Microsoft sql）如果没有，我会建议您添加服务端点并允许受信任的Microsoft服务例外，如下所示。

另外，你需要检查当您创建了一个SQL Server时，您是否添加了"允许Azure服务访问服务器"选项？如下所示？

请告知我们您是否需要进一步的帮助。

I'm having a problem when running Vulnerability Assessments on my Azure SQL database. It cannot connect to my Azure storage account because the storage account has a firewall set with an exception of two of my IP addresses.

When setting the storage account's firewall to "All networks", all works fine - I can set the storage account within the SQL server's Advanced Data Security and then run a Vulnerability Assessment successfully. However, when I set the storage account's firewall to "Selected networks" (with only my own two IP addresses set to be allowed through), the SQL server can no longer access it and I get firewall errors when attempting to set the storage account and when running VAs.

Is there a way to add the Azure servers to the allowed list in my firewall? I have looked at the Azure IP addresses page (can't add the link because my account is apparently unverified) but can only find an IP address for "UK South" whereas my SQL server is based in "UK West".

Any ideas?

解决方案

Hello Ataraxia89,

Sorry for delayed response !

Could you explain about environment to help better on this?

Also, when you say not able to connect to Azure storage account if you set to selected networks?

Did you add the Service endpoints (Azure storage and Microsoft sql ) at subnet level?

If not, I would recommend you to add the service endpoints and allow the trusted Microsoft service exceptions as shown below.

Also, you need to check when you have created a sql server did you add the option "Allow Azure services to access server" as shown below?

Kindly, let us know if you need any further assistance on this.

这篇关于Azure SQL Server无法访问Azure存储帐户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！