Real-Time hub Azure Blob Storage events from a Storage Account outside of the organisation.

[indikaf]

Hello,

I’m trying to create an Azure Blob Storage event to trigger a file upload into a Blob Storage account located outside our organisation. However, the event creation wizard, as shown below, only allows selecting Storage Accounts from the list of subscriptions within my organisation.

Is there a way to connect Fabric to the external Storage Account using an access key instead?

[nilendraFabric]

@indikaf 

You can connect to an external Azure Blob Storage account by providing a connection string that includes your access key, rather than selecting the storage account from a subscription list. When the wizard cannot detect an account outside your organization’s subscriptions, you can manually specify the blob endpoint followed by the key.

For example:

https://<storageaccountname>.blob.core.windows.net/mycontainer;<access-key>

For Azure Data Lake Storage Gen2, you would append sharedkey=<access-key> instead. Make sure that the storage account firewall and networking settings allow connections from your Fabric environment. Once you have set the connection string properly, you can add this external storage account as an event source and trigger events based on blob uploads

If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

[indikaf]

@nilendraFabric thank you for the reply. 

"When the wizard cannot detect an account outside your organization’s subscriptions, you can manually specify the blob endpoint followed by the key." 

Where can I manually specify the blob endpoint in Fabric? Can you share the steps please?

"Once you have set the connection string properly, you can add this external storage account as an event source and trigger events based on blob uploads"
Are you referring to private endpoints here? I tried private endpoints, but I get invalid request error. Again, steps by step guide would be great. 

Thanks

[v-junyant-msft]

Hi @indikaf ,

I think this is the security policy of Azure itself. You cannot directly connect to a storage account outside the organization. If you must use an account outside the organization, please try adding the account as a guest user of the organization and granting relevant role permissions.

Best Regards,
Dino Tao
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[indikaf]

@v-junyant-msft Thank you for the reply. 
Fabric Data Pipelines can connect to external Storage Accounts using access keys. I’m wondering why the same connection isn’t possible for Blob Storage Eventstreaming?