Azure devops unable to access azure storage account?

[tanulbhasin]

Hello,

We are using only Microsoft hosted agents in azure pipeline, and I need to enable the connectivity between them and azure storage account. We don't want to access storage account from any Azure VM or Kubernetes or self-hosted agent hence, selected this configuration:

Error: 

The request may be blocked by network rules of storage account. Please check network rule set using 'az storage account show -n accountname --query networkRuleSet'.

Can anyone guide us to enable connectivity from Microsoft hosted agent. It starts working the moment I select enabled form all networks. The region of Azure devops and storage account is also same. 

Pipeline:-

pool:
  vmImage: ubuntu-latest
.
.
.
- task: AzureCLI@2
    displayName: 'Download file'
    inputs:
      azureSubscription: Production
      scriptLocation: inlineScript
      scriptType: bash
      inlineScript: |
        az storage blob download -c test -n file.zip -f ./file.zip --account-name testaccount

Please help. Thank you. 

Kind Regards,

Tanul

[#2]

@tanulbhasin 

How about get the IP address from pipeline and allowing those IP address to access only?

[#3 · Accepted solution]

@Kidd_Ip 

Microsoft hosted agents doesn't have fix ip address. And if I'm not wrong, they doesn't work over Microsoft backbone network.

[#4]

Azure is using internal IP's to access the storage account when the agent is deployed in the same region

Allowed address lists and network connections - Azure DevOps | Microsoft Learn

@tanulbhasin