Troubleshoot: app gets 403 AuthorizationFailure after the storage firewall was enabled

حل مشكلة: التطبيق بياخد 403 AuthorizationFailure بعد ما الـ Storage firewall اتفعّل

Ticket INC-24811 (P2): "Since this morning the invoicing web servers in subnet web of vnet-invoicing fail to read blobs from contosoinvdata with 403 AuthorizationFailure . The security team says they only 'locked the account to the office' last night. Also, the Azure Monitor diagnostic export into this account stopped." The office (203.0.113.50) must keep access, the account must stay locked down (no "All networks"), and you must not open it to the internet.

The 4 tasks you will do

• Task 1 — Diagnose: read the firewall configurationالمهمة 1 — التشخيص: اقرا إعدادات الـ Firewall
• Task 2 — Fix: let the web subnet in through a service endpointالمهمة 2 — الحل: دخّل الـ Web subnet عن طريق Service endpoint
• Task 3 — Fix: restore the trusted Microsoft services exceptionالمهمة 3 — الحل: رجّع الـ Exception بتاع الـ Trusted Microsoft services
• Task 4 — Add the second office range and verify nothing else was openedالمهمة 4 — ضيف رينج المكتب التاني واتأكد إن مفيش حاجة تانية اتفتحت