访问Azure功能应用程序的Azure存储帐户
我正在尝试通过Visual Studio代码部署Azure函数来函数应用程序。但是面临访问问题禁止403到存储帐户。 Azure存储帐户访问级别是私有的。由于数据安全原因,我不想更改访问级别。我们是否有任何选择可以解决此问题,而无需更改存储帐户中的访问级别?
I am trying to deploy azure function to function App via Visual studio code. But facing access issue forbidden 403 to storage account. Azure storage account access level is private. Due to data security reason I don't want to change access level. Do we have any option to resolve this issue without changing access level in storage account?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
解决方法之一是在您的存储帐户中使用功能应用程序的出站IP。
在执行此操作之前,请确保功能和存储帐户在不同的区域中,因为如果它们在同一区域中,请求将在内部进行,这将不会通过任何出站IP地址。
如果他们在不同的区域,则存储帐户检查IP地址并允许请求。
由于存储帐户不允许公共访问,因此不允许列出的IPS,因此您需要在存储帐户中添加出站IP地址。
One of the workarounds is to whitelist the outbound IPs of the Function App in your storage account.
Before doing this make sure the function and the storage account are in different regions because if they are in the same region the requests take place internally which wouldn't go through any outbound IP Addresses.
If they are in different regions the storage account checks the IP addresses and allows the requests.
Since the storage account doesn't allow public access it wouldn't have the IPs listed which are to be allowed and therefore you need to add the outbound IP Addressess in the storage account.