Troubleshooting Azure Function App Proxy with Private Blob Container Access for Static Web App
Recently, I shared a problem I’m facing in my testing environment with a friend. I’ve decided to bring this issue to an open forum discussion to gather additional insights. I hope you can help me figure out what might be missing in my configuration. **Context:** I’m trying to replicate a solution in my test environment but encountering difficulties in a specific scenario. **Scenario:** I have a Function App acting as a proxy for a Static Web App hosted in a Blob Container. This Blob Container is set to private access, meaning public access is disabled. **The Problem:** The goal is for my Function App to authorize users and direct them correctly to the Static Web App. However, it’s not working as expected. **What I’ve tried so far:** 1. Configured Managed Identity for the Function App and granted the necessary permissions to the Blob Container. 2. Properly set up authentication and created the App Registration, which works flawlessly. 3. Verified that the proxy functions correctly when the Blob Container’s public access is enabled. **Current behavior:** - When public access to the Blob Container is enabled, everything works fine. - When public access is disabled, even with the proxy configured, access fails, and an error message "resource not found" is returned. **My questions are:** 1. Do I need to configure something additional in the proxy definition file? 2. Is there a specific setting, like a private endpoint or something similar, that I should implement to resolve this issue? **Additional considerations:** I haven’t configured a private endpoint yet, but I’m considering whether this would be the most appropriate solution for my case. My initial expectation was that granting the necessary permissions to the Function App via Managed Identity would solve the issue, but it hasn’t. I appreciate any guidance or suggestions you can provide!
New Azure Essentials L200 guidance and labs
We continue to develop more technical content to help partners accelerate the reliability, security, and ongoing performance of their customers' AI and cloud investments. Take a look at the latest materials now available on the Partner Marketing Center: L200 Technical Guidance for Secure Migration: Use this asset to deliver technical guidance and best practices on implementing Azure Essentials guidance for the Migrate and Secure Windows Server, SQL Server, and Linux Estate solution play. Structured as a three-stage process, it includes how-to guidance, best practices and resources across Cloud Adoption Framework, Well-Architected Framework, Azure Architecture Center, Skilling, FinOps and Pricing along with other Migrate and Secure Windows Server, SQL Server, and Linux Estate Solution Play specific elements L200 Technical Guidance for Innovate with Azure AI Platform: Use this asset to deliver technical guidance and best practices on implementing Azure Essentials guidance for the Innovate with Azure AI Platform solution play. Structured as a three-stage process, it includes how-to guidance, best practices and resources across Cloud Adoption Framework for AI Adoption, Data Collocation, Platform Landing Zone, Skilling, FinOps and Pricing along with other Innovate with Azure AI Platform specific elements Click through lab: Assess and remediate an existing application for reliability Discover all the partner-ready Azure Essentials materials available on https://aka.ms/AzureEssentialsPLFormer Employer Abuse
My former employer, Albert Williams, president of American Security Force Inc., keeps adding my outlook accounts, computers and mobile devices to the company's azure cloud even though I left the company more than a year ago. What can I do to remove myself from his grip? Does Microsoft have a solution against abusive employers?'Why Resiliency Matters' - Webinar Registrations now open
Our recent analysis indicates that74% of customer outages could have been preventedby following reliability guidance in theWell-Architected Framework (WAF)*. Ignoring WAF can lead to more frequent outages, diminishedCSAT, and risk to ACR. No matter the workload, customers need help protecting service continuity. Help your customers reduce risk with a Proactive Resilience engagement by designing resilient cloud workloads, or remediating existing critical workloads. In this webinar, Azure Advanced Specialized partners can learn how to deliver Proactive Resilience engagements to provide their customers actionable guidance, recommendations for reliability and uptime; and improved confidence and understanding of Azure. This webinar is an abridged version of our Proactive Resiliency Workshop series, designed for Sales BDMs and non-technical staff.We have three webinar options available, select the time that best suits your schedule: EMEA Timezone: Monday Oct 21 4:00-5:00PM London Time UTC+0 Asia Timezone: Tuesday Oct 22 10:30-11:30AM Singapore Time UTC+8 Americas Timezone: Wednesday Oct 23 1:00-2:00PM PDT UTC+10 AMD is proud to sponsor our webinar series. Microsoft and AMD’s Long-Term Partnership stretches to their commitment to technical education and innovation. Their sponsorship of this workshop is a testament to their commitment to the technology community and their belief in the importance of continued learning and development. If you are interested in learning more about how AMD can support your customers’ proactive resiliency efforts, please visit AMD and Azure | Microsoft AzureWelcome to the Azure Essentials for Partners community!
We're excited to launch a new community to enable partners to helpcustomers elevate reliability, security, and ongoing performance of their cloud and AI investments through Azure Essentials. Here we will be providing you with updates on new assets, tooling and partner training related to Azure Essentials. Azure Migrateand Modernize and Azure Innovate. Azure Essentials is the newest addition to the Azure portfolio. It is not an offer by itself. Rather, it underpinsAzure Migrateand Modernize and Azure Innovate.Azure Essentials providesMicrosoft best practices, product experiences, reference architectures and an array of resources into a single destination to help partners elevate security, reliability, and ongoing performance for cloud and AI workloads of their customers. For partners,this will be your go-to hub to access assets, tooling and partner training to deliver your own differentiated solutions on core scenarios across theMicrosoft Azuresolution plays as well as other important topics like resilience and security. All partner typescan benefit from the self-serve Azure Essentials guidance, however, SIs with infra/DB specialization are likely most suited for the current proactive resiliency scenario. Informationfor partners is available on theAzure Essentials Partner pageon the Microsoft partner website. Stay tuned here in the community for the latest announcements and updates on Azure Essentials!
Creating Logic App to Identify Low Storage Devices from Intune
Hello everyone, I’m seeking some assistance with creating a Logic App. I need to identify devices in Intune that have 5GB or less of available space and receive an email with the details of these devices, including their names. Is this achievable?
Service Trust Portal no longer support Microsoft Account (MSA) access
Dear all, We need to access certain documents (i.e., SOC 2 or ISO 27xxx) on the Service Trust Portal. To download documents you need to be signed in first. However, when I click on "sign in" (using the same email/account as for our azure account) I get the error message "Service Trust Portal no longer support Microsoft Account (MSA) access." (see screenshot below). It seems that I am not the only one since other users had similar issues but they also could not find a solution (or at least it was not mentioned in their post): https://techcommunity.microsoft.com/t5/security-compliance-and-identity/cannot-login-to-service-trust-portal/m-p/3632978 I have been trying this now since more than a week and also created a support ticket (which has not been assigned to a support agent yet). It is quite cumbersome and I hope some of you could have an idea since getting these documents is quite crucial for us.
