Blog Post

Azure Network Security Blog
6 MIN READ

Backup Azure Firewall and Azure Firewall Policy with Logic Apps

Lara_Goldstein's avatar
Lara_Goldstein
Icon for Microsoft rankMicrosoft
Sep 09, 2022
Written in collaboration with ShabazShaik , andrewmathu and tobiotolorin    Introduction: Azure Firewall is Microsoft’s cloud-native, fully stateful firewall as a service that provides the best...
Updated Sep 14, 2022
Version 6.0
azure firewall
azure firewall manager
azure network security
Lara_Goldstein's avatar
Lara_Goldstein
Icon for Microsoft rankMicrosoft
Nov 29, 2022

Thank you for your feedback, Fede7. This article describes how to access Storage Accounts behind firewalls - Connect to Azure Blob Storage from workflows - Azure Logic Apps | Microsoft Learn. 

 

If you are using a System-Assigned Managed Identity to access the storage account, you can make the following changes: 

  1. In the Azure portal, find and open your storage account resource.

  2. On the storage account navigation menu, under Security + networking, select Networking.

    1. Under Allow access from, select Selected networks, which shows the relevant settings.

    2. If you need to access the storage account from your computer, under Firewall, select Add your client IP address.

    3. Under Exceptions, select Allow trusted Microsoft services to access this storage account.

If you are not using a Managed Identity, the Logic App won't be able to access the storage account behind the firewalls when both the logic app resource and storage account exist in the same region. As a workaround, put your logic app resource in a different region than your storage account. Then, give access to the outbound IP addresses for the managed connectors in your region.

 

Hope this helps.