Enabling firewall rules on an Azure storage account serves a critical purpose in enhancing security by restricting unauthorized access. However, when it comes to services like Logic Apps within the same region, there's an intrinsic challenge. Unlike external communication, local communication within the Azure data center operates differently. It abstracts the internal IP addresses, making it challenging to permit access based solely on IP addresses. Therefore, allowing seamless communication between Logic Apps and a firewall-enabled storage account within the same region requires additional considerations beyond standard IP filtering to ensure both security and functionality.
Connect to Azure Blob Storage from workflows - Azure Logic Apps | Microsoft Learn