You can enable traffic from Azure services outside of your network boundary by adding a network security exception.
For a complete list of trusted Azure services, see Trusted Azure services.
Add a network security exception
Navigate to the storage account for which you want to manage exceptions.
In the service menu, under Security + networking, select Networking.
Verify that you've chosen to enable public network access from selected virtual networks and IP addresses.
Under Exceptions, select the exceptions that you want to grant.
Select Save to apply your changes.
Install Azure PowerShell and sign in.
Display the exceptions for the storage account network rules:
(Get-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount").Bypass
Configure the exceptions for the storage account network rules:
Update-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount" -Bypass AzureServices,Metrics,Logging
Remove the exceptions from the storage account network rules:
Update-AzStorageAccountNetworkRuleSet -ResourceGroupName "myresourcegroup" -Name "mystorageaccount" -Bypass None
Install the Azure CLI and sign in.
Display the exceptions for the storage account network rules:
az storage account show --resource-group "myresourcegroup" --name "mystorageaccount" --query networkRuleSet.bypass
Configure the exceptions for the storage account network rules:
az storage account update --resource-group "myresourcegroup" --name "mystorageaccount" --bypass Logging Metrics AzureServices
Remove the exceptions from the storage account network rules:
az storage account update --resource-group "myresourcegroup" --name "mystorageaccount" --bypass None
See also