Forum Discussion
Azure devops unable to access azure storage account?
Hello,
We are using only Microsoft hosted agents in azure pipeline, and I need to enable the connectivity between them and azure storage account. We don't want to access storage account from any Azure VM or Kubernetes or self-hosted agent hence, selected this configuration:
Error:
The request may be blocked by network rules of storage account. Please check network rule set using 'az storage account show -n accountname --query networkRuleSet'.
Can anyone guide us to enable connectivity from Microsoft hosted agent. It starts working the moment I select enabled form all networks. The region of Azure devops and storage account is also same.
Pipeline:-
pool:
vmImage: ubuntu-latest
.
.
.
- task: AzureCLI@2
displayName: 'Download file'
inputs:
azureSubscription: Production
scriptLocation: inlineScript
scriptType: bash
inlineScript: |
az storage blob download -c test -n file.zip -f ./file.zip --account-name testaccount
Please help. Thank you.
Microsoft hosted agents doesn't have fix ip address. And if I'm not wrong, they doesn't work over Microsoft backbone network.
How about get the IP address from pipeline and allowing those IP address to access only?
- tanulbhasinBrass Contributor
Microsoft hosted agents doesn't have fix ip address. And if I'm not wrong, they doesn't work over Microsoft backbone network.
- lakimeCopper Contributor
Azure is using internal IP's to access the storage account when the agent is deployed in the same region
Allowed address lists and network connections - Azure DevOps | Microsoft Learn