Azure功能:访问存储帐户时出现403错误 [英] Azure functions : Getting 403 error while accessing the storage account

问题描述

我一直在项目中使用基于天蓝色计时器的函数.自从我开始使用该功能以来，我收到与从Azure存储帐户禁止访问有关的错误403.

我尝试在函数的配置中添加AzureWebJobsStorage密钥我尝试添加Azure存储帐户的允许IP范围的出站IP我尝试检查允许对存储帐户使用Azure管理服务的选项.

但是，我的函数应用程序的特定计时器函数仍然出现错误.其他功能正常运行.

尽管，如果我允许存储帐户防火墙和VN设置中的所有网络，则我的功能运行正常.

功能和存储帐户都在同一区域.

我想以某种方式启用它，而无需选择允许所有网络.该怎么办?

解决方案

已经有关于此问题的一些答案，您可以查看此处.

简而言之，如果函数和存储帐户位于同一区域，则它们将以内部方式进行通信，而无需通过 outboundIpAddresses ./p>

解决方法是在不同的区域创建它们.

I have been using azure timer based function in my project. Since I started using the function, I was getting error 403 related to access forbidden from Azure storage account.

I tried adding AzureWebJobsStorage Key in function's configuration I tried adding outbound IPs of Allowed ip ranges of azure storage accounts I tried checking the option of allowing azure managed services to the storage account.

However, I'm still getting the error in that particular timer function of my function app. The other functions run properly.

Although, if I allow all the networks in storage account firewall and VN settings, my function runs proper.

Both the function and storage account are in same region.

I want to enable it somehow that I do not need to choose the allow all networks. What can be done?

解决方案

There're already some answers about this issue, you can see here and here.

In short, if the function and storage account are in same region, they communicate in an internal way without going through outboundIpAddresses.

The workaround is that create them in different regions.

这篇关于Azure功能:访问存储帐户时出现403错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！