1

If I add a firewall rule on my Azure storage account that only allows access from my IP address, I can still successfully access the table and queue storage in that storage account, but when I try to access any of the blobs or file storage, I get an error.

Using Microsoft Azure Storage Explorer, the error I see is 'Unable to retrieve child resources. This request is not authorized to perform this operation'

It seems crazy that the firewall rule would work differently for blob and table storage. Any ideas?

Code Monkey
  • 290
  • 2
  • 19
  • Could you please detach that storage account in the storage explorer, then connect to it again? – Jason Ye Mar 06 '18 at 05:56
  • How do you connect to your storage account in Microsoft Azure storage explorer? Azure account or connection string or a storage account key name and key? – Jason Ye Mar 06 '18 at 08:03
  • It makes no difference whether I connect with an Azure account or a connection string. I also see the same problem if I try to connect to the blob store from the Azure Portal, or using Powershell. Table storage is still accessible in all of these scenarios. – Code Monkey Mar 06 '18 at 11:44
  • Also, I've seen the problem on three separate storage accounts. These accounts are all in westeurope and in the same resource group. – Code Monkey Mar 06 '18 at 13:46
  • could you show me more settings information about your storage account? – Jason Ye Mar 08 '18 at 00:50
  • Thanks for following up Jason. I've figured out what I was doing wrong. – Code Monkey Mar 09 '18 at 09:25

1 Answers1

3

I finally figured this out. It's a bit embarrassing! It turns out that my company has two internet connections, and the firewall decides which one to use based on the name of the resource. So table and blob storage are accessed using different IP addresses. I only put one of these IP addresses in the firewall rules (the one that was being used to access table storage).

Thanks to Jason Ye for trying to help me out!

Code Monkey
  • 290
  • 2
  • 19