Issue

When trying to create a new Azure Blob Storage log source in Panther the following error occurs:

Source xx did not pass configuration check because: 
xxxx
===== RESPONSE ERROR (ServiceCode=AuthorizationFailure) ===== 
Description=This request is not authorized to perform this operation. 
xxxx

Resolution

To resolve this issue:

  1. Ensure that you have followed the setup steps under "How to set up Azure Blob Storage as a log source in Panther."

  2. Verify that your storage account is publicly accessible.

    Verify that your storage account is publicly accessible while creating an Azure Blob Storage log source in Panther

  3. Note that in step 5 from our relevant documentation on how to create the infrastructure manually in the Azure Console, all containers (including the ones auto-created, named insight-*) require the roles assigned.

If the issue persists, contact our support team and provide them with the error that was raised.

Cause

This issue occurs when there is a misconfiguration in the setup steps of an Azure Blob Storage log source or the Azure storage account is not publicly accessible, resulting in an authorization failure.