An administrator manages a premium storage account named `saengshared` in the West US 2 region. The storage account hosts an SMB file share named `projectshares`. To protect the file share, a Recovery Services vault named `rsv-westus2-01` is deployed in the same region. The firewalls and virtual networks settings on `saengshared` are configured to restrict access to selected networks only. When configuring backup for the file share, the operation fails because the vault cannot access the storage account. What must be configured on `saengshared` to resolve the issue?
- Enable the 'Allow Azure services on the trusted services list to access this storage account' exception in the firewall settings.Cevap
- BAssign the Backup Operator role to the storage account's system-assigned managed identity at the vault scope.
- CAdd the public IP addresses of the Azure Backup service endpoints in the West US 2 region to the allowed IP ranges of the firewall.
- DCreate a private endpoint for the Recovery Services vault and associate it with the storage account subnet.
Cevap
Enable the 'Allow Azure services on the trusted services list to access this storage account' exception in the firewall settings.
The correct answer is to enable the exception 'Allow Azure services on the trusted services list to access this storage account'. Azure Backup is a trusted Microsoft service, and enabling this setting allows the service to orchestrate backup and restore operations for the file share even when the storage account firewall is configured to block public access.
Adım Adım Çözüm
Anahtar Kavram
Bypassing Azure Storage Account firewalls for trusted Microsoft services like Azure Backup during Azure Files backup configuration.