Request is not authorized to perform this operation (403 unauthorized) . Azure blob storage

Question

We have multiple backend APIs hosted on Microsoft Azure web app under same app service plan. All APIs have same outbound ip's, and all these APIs enabled access restriction, these APIs only accessible within the API gateway. We have blob storage, we have also enable restriction on it (Networking Enabled from selected virtual networks and IP addresses  Firewall, added all APIs ip's on it), Now when APIs going to fetch some image from blob it throw following error,

Azure.RequestFailedException: This request is not authorized to perform this operation. RequestId:0bc5827d-c01e-0030-382f-929e61000000 Status: 403 (This request is not authorized to perform this operation.) ErrorCode: AuthorizationFailure Content:

AuthorizationFailureThis request is not authorized to perform this operation.

RequestId:0bc5827d-c01e-0030-382f-929e61000000 Time:2023-05-29T13:11:56.0013545Z

Note:Both APIs and blob are not using vNet, and both are on same resource group and using the same Identity but when we remove network restriction on storage account it works fine

Answer 1

Have you enabled VNET integration on your WebApp and activated the service endpoint for the storage account on your VNET?