Support for firewall enabled storage account
Unable to deploy Function App onto a Storage Account with the Firewall enabled. We have also tried using VNET integrated Function Apps and have come across the same problem.
Storage accounts without firewall enabled is seen as a risk by our Security Team.
This functionality is currently available using the Premium Plan and a virtual network integration.
There is currently a bug that causes the storage account to take up to 12 hours to update its service endpoint, however, the feature performs as expected once this change has propagated.
thanks for the feedback!
Azure Functions Team
Saulo Aflitos commented
Yet, the backup still fail in those situations.
Cesar Abrego commented
ou docs do not state anything on this. They still show that storage accounts used by a function app 'can't have a firewall enabled' if that's no longer the case you need to update the docs and your support center knowledge.
Iain Shepherd (ishepher) commented
An Azure Support case has found that this is broken. I raised a fresh feedback item https://feedback.azure.com/forums/355860-azure-functions/suggestions/38614045-support-firewall-enabled-storage-account-on-premiu
Minh Trieu commented
This does not appear to be working in Australia East. I'm deploying a new VNET integrated Function Apps and it still has trouble accessing the Storage account. The Function App subnet has been allowed on the Storage account firewall.
Error Message - "There was a conflict. The remote server returned an error: (403) Forbidden."