javaazure-functionsazure-storageazure-blob-trigger

Java Azure function fails to start with error "Azure.RequestFailedException : This request is not authorized.."

I have a java azure function with blob triggers. We are moving from connection string based authentication to managed identity based authentication. Please find the azure function configs we have below:

1.Java 17 runtime

2.Bundles in host.json

"version": "2.0",
"extensionBundle": {
    "id": "Microsoft.Azure.Functions.ExtensionBundle",
    "version": "[4.*, 5.0.0)"
}

  1. Using App service plan "Premium v2 P3V2".

  2. Azure function app's VNET subnet is listed under Storage account's allowed VNET accesses.

  3. Disabled System-assigned identity and added required roles in user managed identity as per documentation as shown below:

enter image description here

enter image description here

  1. Added required environment variables in app settings:

enter image description here

  1. removed connection string setting "AzureWebJobsStorage=connection-string"

  2. Added app setting "keyVaultReferenceIdentity=identity-resource-id"

Error snapshot:

enter image description here

Please help me. Thanks in advance.

Solution

  • Added "Reader" role for the blob storage in the user managed identity, restarted the app which fixed the issue.

    Error from the notifications tab is vanished. Functions are healthy and processes blobs successfully.

    enter image description here
    enter image description here