error on azure infra deployment due to hardening on key based authentication is not permitted #265
Description
Hi team, i checked this git repo is really helpful and want to re-run in my subscription, unfortunately due to some hardening policy, i am unable to deploy this repo with error below, checking if anyone has similar issue ? thanks
Describe the bug
error on deployment due to new policy restriction on company - nokey based authentication on storage account.
To Reproduce
followed the guidance and pre-reqs but stuck on the error during azure infra module deployment. and the deployment script just stopped and exited, looking for workaround ?
Expected behavior
A clear and concise description of what you expected to happen.
======================
You can view detailed progress in the Azure Portal:
https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/%2Fsubscriptions%2F07eadda4-eb9a-4c4b-8acb-4a4500d3ca00%2Fproviders%2FMicrosoft.Resources%2Fdeployments%2Fai-apps-01-1758684327
(✓) Done: Resource group: rg-ai-apps-01-dev-southeastasia-application (4.327s)
(✓) Done: Log Analytics workspace: log-jaay662ssrc5o (24.007s)
(✓) Done: Application Insights: appi-jaay662ssrc5o (14.882s)
(✓) Done: Azure Front Door / CDN profile: afd-jaay662ssrc5o (52.495s)
(✓) Done: App Service plan: asp-common-jaay662ssrc5o (8.115s)
(✓) Done: Storage account: stdevjaay662ssrc5o (24.446s)
(✓) Done: Azure SQL Server: sql-jaay662ssrc5o (1m8.937s)
(✓) Done: Container Registry: acrjaay662ssrc5o (1m55.133s)
(✓) Done: Key Vault: kv-jaay662ssrc5o (1m44.597s)
(✓) Done: Service Bus Namespace: sb-jaay662ssrc5o (1m43.247s)
(✓) Done: App Service: app-webservice-jaay662ssrc5o (30.512s)
(✓) Done: App Service: app-webfrontend-jaay662ssrc5o (30.959s)
(✓) Done: Container Apps Environment: acae-common-jaay662ssrc5o (2m33.548s)
(✓) Done: Container App: aca-renderer-jaay662ssrc5o (20.283s)
(✓) Done: Cache for Redis: redis-jaay662ssrc5o (19m8.782s)
|===== | Creating/Updating resources
ERROR: error executing step command 'provision': deployment failed: error deploying infrastructure: deploying to subscription:
Deployment Error Details:
DeploymentScriptOperationFailed: Key based authentication is not permitted on this storage account.
RequestId:9dadc4f6-901a-0048-2204-2dd2ce000000
Time:2025-09-24T03:34:49.4063122Z
Status: 403 (Key based authentication is not permitted on this storage account.)
ErrorCode: KeyBasedAuthenticationNotPermitted
Content:
KeyBasedAuthenticationNotPermittedKey based authentication is not permitted on this storage account.
RequestId:9dadc4f6-901a-0048-2204-2dd2ce000000
Time:2025-09-24T03:34:49.4063122Z
Headers:
x-ms-request-id: 9dadc4f6-901a-0048-2204-2dd2ce000000
x-ms-error-code: KeyBasedAuthenticationNotPermitted
Date: Wed, 24 Sep 2025 03:34:49 GMT
Server: Microsoft-HTTPAPI/2.0
Content-Length: 269
Content-Type: application/xml