App Service VNet Integration with Azure Storage Service Endpoint

3
votes

I made an App Service (S1) and then from the Networking blade created a VNet Integration using the documentation here. The connection looks like VNet Integration Configuration Then I made a Storage Account and under the Firewall and Networking tab I selected the preconfigured VNet that was made by the portal Storage networking tab here

Trying to access the Azure Storage from a deployed Web App give a 403 forbidden error. What settings do I need to change for the Web App to gain access to the Azure Storage Service Endpoint?

1
azureazure-web-app-serviceazure-storageazure-virtual-network
Did you find any solution? I'm facing the same issue – Augusto Barreto
Outside of using App Service Environment, it looks like Virtual Networks are not possible. But Azure AD Authentication for Azure Storage is in preview and may be something you could look into to lock down azure storage resources. azure.microsoft.com/en-us/blog/… – robjam

1 Answers

3
votes

Vnet integration gives your web app access to resources in your virtual network but does not grant private access to your web app from the virtual network.

Private site access refers to making your app only accessible from a private network such as from within an Azure virtual network. Private site access is only available with an ASE configured with an Internal Load Balancer (ILB).

More information about ILB ASE, please refer to this article.