Terraform and Azure: Unable to provision Storage Account

Question

I am trying to provision a storage account but running it results in error:

Error: Error reading static website for AzureRM Storage Account "sa12345461234512name":
accounts.Client#GetServiceProperties: 
Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: 
Service returned an error. Status=403 Code="AuthorizationPermissionMismatch" 
Message="This request is not authorized to perform this operation using this permission.\n
RequestId:05930d46-301e-00ac-6d72-f021f0000000\n
Time:2020-03-02T09:09:44.9417598Z"

Running OS Windows 10 Pro.

Steps to replicate (in Powershell with Azure CLI installed)

az login
mkdir dummyFolder
cd dummyFolder
create config.tf
terraform init
terraform plan
terraform apply -auto-approve

Config.tf contents

# Configure the Azure Provider
provider "azurerm" {
  version = "=2.0.0"
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "Australia East"
}

resource "azurerm_storage_account" "example" {
  name                     = "sa12345461234512name"
  resource_group_name      = azurerm_resource_group.example.name
  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "LRS"

  tags = {
    environment = "staging"
  }
}

Not sure what i am missing, all other resources work fine, just the storage account.

this looks like a lack of permissions? what are your permissions on the subscruption? — 4c74356b41
i've not applied any permissions to subscription, so whatever the default settings are is what i am using. It advises that i am admin on the subscription — Aeseir

Doug Doug · Accepted Answer · 2020-04-28T07:02:30

This is a bug in the azure provider, see: https://github.com/terraform-providers/terraform-provider-azurerm/issues/5869

Update your provider; it doesn't seem to be related to the terraform version.

From:

# Configure the Azure Provider
provider "azurerm" {
  # whilst the `version` attribute is optional, we recommend pinning to a given version of the Provider
  version = "=2.0.0"
  features {}
}

To:

provider "azurerm" {
  version = "~> 2.1.0" 
  features {}
}

Terraform and Azure: Unable to provision Storage Account

4 Answers