Azure Blob 存储 - SAS - 数据工厂

Question

我能够进行 blob 测试连接并且成功，但是当我尝试查找存储路径时，它显示此错误。 screenshot

完整错误:

Failed to loadBlob operation failed for: Blob Storage on container '' and path '/' get failed with 'The remote server returned an error: (403) Forbidden.'. Possible root causes: (1). Grant service principal or managed identity appropriate permissions to do copy. For source, at least the “Storage Blob Data Reader” role. For sink, at least the “Storage Blob Data Contributor” role. For more information, see https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-blob-storage?tabs=data-factory#service-principal-authentication. (2). It's possible because some IP address ranges of Azure Data Factory are not allowed by your Azure Storage firewall settings. Azure Data Factory IP ranges please refer https://docs.microsoft.com/en-us/azure/data-factory/azure-integration-runtime-ip-addresses. If you allow trusted Microsoft services to access this storage account option in firewall, you must use https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-blob-storage?tabs=data-factory#managed-identity. For more information on Azure Storage firewalls settings, see https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal.. The remote server returned an error: (403) Forbidden.StorageExtendedMessage=Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.

上下文:我正在尝试将数据从 SQL 数据库复制到 Snowflake，并且为此使用 Azure 数据工厂。由于这不会发布，因此我启用暂存副本并连接 Blob 存储。

我已经尝试检查网络并且它已设置为所有网络。我不确定我在这里缺少什么，因为我发现一个 YouTube 视频可以正常工作，但他们没有显示与此相关/类似的问题。 https://www.youtube.com/watch?v=5rLbBpu1f6E .

我还尝试保留空存储路径，但复制数据管道的触发器未成功。

触发器的完整错误:

Operation on target Copy Contacts failed: Failure happened on 'Sink' side. ErrorCode=FileForbidden,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Error occurred when trying to upload a blob, detailed message: dbo.vw_Contacts.txt,Source=Microsoft.DataTransfer.ClientLibrary,''Type=Microsoft.WindowsAzure.Storage.StorageException,Message=The remote server returned an error: (403) Forbidden.,Source=Microsoft.WindowsAzure.Storage,StorageExtendedMessage=Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.

Answer 1

我创建了 Blob 存储并为其生成了 SAS token 。我使用 SAS URI 创建了一个 Blob 存储链接服务 它创建成功。引用图片:

当我尝试检索路径时出现以下错误

我通过启用从存储帐户的所有网络启用来更改存储帐户的网络设置引用图片:

我尝试在数据工厂中再次检索路径。它成功了。我能够检索路径。引用图片:

另一种方法是将 IP 地址列入白名单，我们可以解决此问题。