---
id: 3d53a160-c10a-4596-8b71-70e728e60ffa
---

# Azure Storage Account Data Upload or Download Failures

This incident type refers to failures in uploading or downloading data to/from an Azure storage account. The issue can be caused due to problems with the connection to the storage account, access keys, or SAS tokens. It is important to check for network issues and ensure that the correct permissions are set to resolve this type of incident.

### Parameters

```shell
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export RESOURCE_GROUP_NAME="PLACEHOLDER"
export CONTAINER_NAME="PLACEHOLDER"
export CONNECTION_STRING="PLACEHOLDER"
export USER_OR_APPLICATION_OBJECT_ID="PLACEHOLDER"
export SCOPE="PLACEHOLDER"
```

## Debug

### Check the status of the storage account

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### Check the connection string for the storage account

```shell
az storage account show-connection-string --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### Check the list of access keys associated with the storage account

```shell
az storage account keys list --account-name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### List the blobs in the container to check if the connection is working

```shell
az storage blob list --container-name ${CONTAINER_NAME} --connection-string '${CONNECTION_STRING}'
```

## Repair

### Update the permissions correctly for the storage account. Ensure that the user or application has the required permissions to upload or download data to/from the storage account.

```shell
#!/bin/bash

# Set the variables
user_or_application_object_id=${USER_OR_APPLICATION_OBJECT_ID}
scope=${SCOPE}
permission="Storage Blob Data Contributor"

# Grant the specified permission to the user or application for the storage account
az role assignment create --assignee-object-id $user_or_application_object_id --role $permission --scope $scope
# Check if the permission has been granted successfully
if [ $? -eq 0 ]; then
  echo "Permission '$permission' has been granted to the user or application with object ID '$user_or_application_object_id' for the storage account '$storage_account' in the resource group '$resource_group'"
else
  echo "Failed to grant permission '$permission' to the user or application with object ID '$user_or_application_object_id' for the storage account '$storage_account' in the resource group '$resource_group'"
fi
```

### Create a SAS tokens used to access the storage account

```shell
bash
#!/bin/bash

# Set the parameters
connection_string=${CONNECTION_STRING}


end=$(date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ')
# Generate a Shared Access Signtature for the account

az storage account generate-sas --coonection-string '$connection_string' --expiry $end --https-only --permission acwudt --resource-types co --services bfqt
```

This incident type refers to failures in uploading or downloading data to/from an Azure storage account. The issue can be caused due to problems with the connection to the storage account, access keys, or SAS tokens. It is important to check for network issues and ensure that the correct permissions are set to resolve this type of incident.


```shell
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export RESOURCE_GROUP_NAME="PLACEHOLDER"
export CONTAINER_NAME="PLACEHOLDER"
export CONNECTION_STRING="PLACEHOLDER"
export USER_OR_APPLICATION_OBJECT_ID="PLACEHOLDER"
export SCOPE="PLACEHOLDER"
```


### Check the status of the storage account

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### Check the connection string for the storage account

```shell
az storage account show-connection-string --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### Check the list of access keys associated with the storage account

```shell
az storage account keys list --account-name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### List the blobs in the container to check if the connection is working

```shell
az storage blob list --container-name ${CONTAINER_NAME} --connection-string '${CONNECTION_STRING}'
```


### Update the permissions correctly for the storage account. Ensure that the user or application has the required permissions to upload or download data to/from the storage account.

```shell
#!/bin/bash

# Set the variables
user_or_application_object_id=${USER_OR_APPLICATION_OBJECT_ID}
scope=${SCOPE}
permission="Storage Blob Data Contributor"

# Grant the specified permission to the user or application for the storage account
az role assignment create --assignee-object-id $user_or_application_object_id --role $permission --scope $scope
# Check if the permission has been granted successfully
if [ $? -eq 0 ]; then
  echo "Permission '$permission' has been granted to the user or application with object ID '$user_or_application_object_id' for the storage account '$storage_account' in the resource group '$resource_group'"
else
  echo "Failed to grant permission '$permission' to the user or application with object ID '$user_or_application_object_id' for the storage account '$storage_account' in the resource group '$resource_group'"
fi
```

### Create a SAS tokens used to access the storage account

```shell
bash
#!/bin/bash

# Set the parameters
connection_string=${CONNECTION_STRING}


end=$(date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ')
# Generate a Shared Access Signtature for the account

az storage account generate-sas --coonection-string '$connection_string' --expiry $end --https-only --permission acwudt --resource-types co --services bfqt
```


Azure Storage Account Data Upload or Download Failures

Overview

Parameters

Debug

Check the status of the storage account

Check the connection string for the storage account

Check the list of access keys associated with the storage account

List the blobs in the container to check if the connection is working

Repair

Update the permissions correctly for the storage account. Ensure that the user or application has the required permissions to upload or download data to/from the storage account.

Create a SAS tokens used to access the storage account

Learn more

Related Runbooks

Support