Restrict access to my Blob storage to only my UI App Service

Seif Ibrahim 0

I have an Web App service (ReactJS app) and I have an Storage account that has videos that the client app should play. I don't want to make the videos public available and want them to be accessible only via the Web App. I tried to create a Virtual Network that has the subnet IP of the Web App but when I try to load a video using URL, it gets status code 401 (Unauthorized) from the storage account.How can we make only the Web App can access the Storage without making the storage public access?

Vinod Kumar Reddy Chilupuri 2,470 Reputation points Microsoft Vendor

2025-02-17T16:20:33+00:00

Hi @Seif Ibrahim

To restrict access to your Azure Blob Storage so that it is only accessible from your Web App Service, please follow these below steps that may resolve your issue.

Disable Public Network Access: Disable all public network access for your storage account in the Azure portal under the storage account's firewall settings.

Create a Virtual Network: Verify that you have a virtual network (VNet) set up that your Web App Service can connect to.

Web App Service to the VNet: Integrate your Web App Service with the virtual network to allow private communication with the storage account.

Configure Network Rules: Configure the network rules In the Azure portal, to allow access from the subnet of your virtual network by adding a network rule that specifies the virtual network and subnet.

Use Managed Identity: If your Web App is using a managed identity, grant the necessary permissions to that identity to access the storage account, enabling authentication without storing credentials. (e.g., Storage Blob Data Reader or Storage Blob Data Contributor)

Test Access: Test the access from your Web App to ensure it can retrieve the videos from the storage account without encountering a 401 Unauthorized

by following the above steps, you can effectively restrict access to your Azure Blob Storage, ensuring that it is only accessible by your Web App Service while maintaining a secure and controlled environment for accessing the videos stored in the Blob Storage. confirm that the permissions, CORS rules, and network settings are correctly configured to allow access from your UI App Service.

https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies?tabs=portal#restrict-network-access-to-azure-storage-accounts
https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal#configure-network-access-to-azure-storage

Hope the above suggestion helps! Please let us know do you have any further queries.

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Vinod Kumar Reddy Chilupuri 2,470 Reputation points Microsoft Vendor

2025-02-19T08:44:55.5766667+00:00

Hi @Seif Ibrahim
Just checking to see if the above suggestion helped you to solve your issue, please let us know if you have any further queries. If the above suggestion helps you to solve your issue, please accept the answer, this can be beneficial to other community members.
Vinod Kumar Reddy Chilupuri 2,470 Reputation points Microsoft Vendor

2025-02-21T09:38:17.5766667+00:00

Hi @Seif Ibrahim
Just checking to see if the above suggestion helped you to solve your issue, please let us know if you have any further queries. If the above suggestion helps you to solve your issue, please accept the answer, this can be beneficial to other community members.

Share via

Restrict access to my Blob storage to only my UI App Service

Your answer