Forum Discussion
Azure devops unable to access azure storage account?
Hello,
We are using only Microsoft hosted agents in azure pipeline, and I need to enable the connectivity between them and azure storage account. We don't want to access storage account from any Azure VM or Kubernetes or self-hosted agent hence, selected this configuration:
Error:
The request may be blocked by network rules of storage account. Please check network rule set using 'az storage account show -n accountname --query networkRuleSet'.
Can anyone guide us to enable connectivity from Microsoft hosted agent. It starts working the moment I select enabled form all networks. The region of Azure devops and storage account is also same.
Pipeline:-
pool:
vmImage: ubuntu-latest
.
.
.
- task: AzureCLI@2
displayName: 'Download file'
inputs:
azureSubscription: Production
scriptLocation: inlineScript
scriptType: bash
inlineScript: |
az storage blob download -c test -n file.zip -f ./file.zip --account-name testaccount
Please help. Thank you.
Microsoft hosted agents doesn't have fix ip address. And if I'm not wrong, they doesn't work over Microsoft backbone network.
3 Replies
How about get the IP address from pipeline and allowing those IP address to access only?
- tanulbhasinBrass Contributor
Microsoft hosted agents doesn't have fix ip address. And if I'm not wrong, they doesn't work over Microsoft backbone network.
- lakimeCopper Contributor
Azure is using internal IP's to access the storage account when the agent is deployed in the same region
https://learn.microsoft.com/en-us/azure/devops/organizations/security/allow-list-ip-url?view=azure-devops&tabs=IP-V4