Access Azure Blob using Logic App

Published Jun 09 2020 11:25 AM 2,371 Views
Microsoft
In this article Let's explore how to automate the process of accessing Blobs using Logic Apps.
The purpose of the blog is to demonstrate the challenges currently we face while accessing secured blobs and how to overcome them.
 
Azure Blob Storage offers three types of the storage services : blobs, block blobs, append blobs, and page blobs.
 
Please find the kind of Blobs listed over here
 
In today's topic, I will be giving you overall picture on the possible ways of accessing blob from Azure Logic Apps.
 
There are several ways to access blobs and few of them are:
  1. Using Azure Functions.
  2. Using REST APIs.
  3. Dot Net code/Other programming Language
  4. Logic Apps.
 
You can find more information on this this article
 
Let's begin with the number of possible ways we can connect with Azure Storage Blobs using Logic Apps under various security constraints.

This might give the clear picture on how to access Azure blob from Logic Apps under various constraints.
 
Source(Logic App)
Connector/
Action
Connectivity Status
Is it behind Firewall?
Destination
(Storage-Blob)
Regions
Comments
LA.jpg

 

 
 
 
 

 

 
blobactionicon.png

 





 

 

correct.png

 




 

 

 
 
blobicon.png

 




 
 

 

Same
Yes Possible with Azure Blob Connector.
However , it is even possible with Http action with
Managed Identity and other Authorization Methods.
 
The steps how to access the Blob using Blob Connector in Logic App is been explained
in detail

 

LA.jpg

 

blobactionicon.png

 

correct.png

 
 

blobicon.png

Cross
Yes, it is Possible with Azure Blob Connector.
However , it is even possible with Http action with
Managed Identity and other Authorization Methods. You can find more information on Accessing Azure blob using Blob Connector
here.

LA.jpg

 

 

 

httpicon.png

 


 

correct.png

 

blobicon.png

Same
Yes Possible only with SAS URI. Also possible when we use Managed Identity

LA.jpg

httpicon.png

correct.png

 

blobicon.png

Cross
Yes Possible only with SAS URI. Also possible when we use Managed Identity

LA.jpg

 

blobactionicon.png

 

 

wrong.png

 

Firewallicon.png

blobicon.png

Same
Not possible even if we use IP whitelisting

LA.jpg

blobactionicon.png

 

correct.png

 

Firewallicon.png

blobicon.png

Cross
If we whitelist the Connector IP List in Blob
 

LA.jpg

 

httpicon.png

 

correct.png

 

Firewallicon.png

 

blobicon.png

Same
Only through Managed Identity with "Blob Contributor rights" for Particular Logic App
You can find more information on Accessing Azure blob using Managed Identity. Refer : Link1 , Link2
 

 

LA.jpg

 

 

httpicon.png

 

correct.png

 

 

Firewallicon.png

 

 

blobicon.png

Cross
Can be accessed through Managed Identity with "Blob Contributor rights". If not with Managed Identity it can also be accessed by whitelisting the Runtime IPs of  Logic Apps.
Disclaimer : This article holds valid at the time of writing.
Version history
Last update:
‎Jan 05 2021 03:19 AM
Updated by: