Hey everyone! I'm having a bit of a headache with Azure Foundry's Content Understanding feature. We're set up using a Private Endpoint to connect Azure Foundry to a VNet, and the files needed for Content Understanding are stored in an Azure Storage Account, which is also linked to the same VNet via a Private Endpoint. However, I'm hitting a wall because Foundry can't access the storage account.
I've already added the subnet of Azure Foundry to the Storage Account firewall rules, but I'm still getting an error message that reads:
System.Exception: Document analysis request failed. {"error":{"code":"InvalidRequest","message":"Invalid request.","innererror":{"code":"ContentSourceNotAccessible","message":"Error occurred while trying to read from the content source."}}}
I've tried several configurations like allowing the subnet through the Storage Account firewall, tweaking Network Security parameters, enabling trusted Microsoft services, and specifying resource instances for Microsoft.CognitiveServices – but nothing seems to work. The only time I can get it to access the storage is when I turn off the firewall and allow access from all networks.
Is there something I'm missing or any specific configuration I should check? Any help would be greatly appreciated! Thanks!
2 Answers
When I dealt with AI foundry issues with private endpoints, I discovered that Foundry creates machine learning managed identities that require access permissions on other resources. I suggest checking for "machine learning endpoint" in your resource group and giving those identities the correct storage blob data reader or contributor roles on the storage account.
Have you checked the networking settings under the AI Foundry resource? There was an option for setting up links – not sure if it’s called private links or something else. If you find it, create a link from Foundry to the storage account. Then make sure to approve the private endpoint that it creates in your storage account's private endpoint section. That could solve your access issues.
Related Questions
Biggest Problem With Suno AI Audio
How to Build a Custom GPT Journalist That Posts Directly to WordPress