Why does LAW data export work with SA with public access disabled?

Julian Bednarz 20 Reputation points
2025-07-10T18:03:50.7066667+00:00

I have a fresh storage account with public access disabled. On Log Analytics Workspace I created a data export to this storage account to test if it will work, since im preparing a PoC for a client. It does copy all the selected tables, but how?

From Azure Docs,

If you've configured your Storage Account to allow access from selected networks, you need to add an exception to allow Azure Monitor to write to the account.

https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-data-export?tabs=portal#allow-trusted-microsoft-services

I get that, but why does this work with public access disabled?

Azure Storage
Azure Storage

Globally unique resources that provide access to data management services and serve as the parent namespace for the services.

Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Stanislav Zhelyazkov 29,826 Reputation points MVP Volunteer Moderator
2025-07-11T05:50:56.99+00:00

Hi,

I think this is result of this limitation:

"By design, access to a storage account from trusted services takes the highest precedence over other network access restrictions. If you set Public network access to Disabled after previously setting it to Enabled from selected virtual networks and IP addresses, any resource instances and exceptions that you previously configured, including Allow Azure services on the trusted services list to access this storage account, will remain in effect. As a result, those resources and services might still have access to the storage account."

Restrictions and considerations

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Was this answer helpful?

1 person found this answer helpful.
0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    6 deleted comments

    Comments have been turned off. Learn more