ListAccountSAS Error in Azure Activity Log

Written by James McDonald

September 16, 2019

So getting an error after doing a heap of study with an Azure Free Trial Account and deleting all my resource groups every night

But an error kept appearing every minute in the Activity Log

You can see the JSON of the error below. (And if you are worried about security I found and replaced all the UUID’s with new UUID’s)

So to fix this I had to recreate the resource group Toggen-EventTest then create the storage account tgnsq

I then went into the “Events” pane in the tgnsq storage account and found under the Event Subscription tab an event subscription (I think I named it tgnsq-eventsub1) that hadn’t been deleted during the original storage account deletion. After deleting this the ListAccountSAS events stopped after a few minutes

Another thing I did, and I don’t know if this helped or not, was to click on the Connectivity Check blade and check that this was OK. I found two similar to the following errors.

Failed to list queues: code: AuthorizationPermissionMismatch content:  message: This request is not authorized to perform this operation using this permission. RequestId:242ad2e8-e003-00c4-6a89-6ca69f000000 Time:2019-09-16T12:25:56.8762342Z name: StorageError requestId: 242ad2e8-e003-00c4-6a89-6ca69f000000 url: https://tgnsq.queue.core.windows.net/?comp=list&_=1568636753116 xhr: {}

I added myself to the Storage Blob Data Contributor and Storage Queue Data Contributor roles. Log out and back in and now everything was working where the error occurred under Blob service (Azure AD) and Queue service (Azure AD)

{
    "authorization": {
        "action": "Microsoft.Storage/storageAccounts/listAccountSas/action",
        "scope": "/subscriptions/122b193c-4d4a-4a9d-90f1-a86efa84b58d/resourceGroups/Toggen-EventTest/providers/Microsoft.Storage/storageAccounts/tgnsq"
    },
    "caller": "728b90e9-040b-473c-98f1-323d7436b51c",
    "channels": "Operation",
    "claims": {
        "aud": "https://management.core.windows.net/",
        "iss": "https://sts.windows.net/8fbbacd5-a58a-4a92-995c-182e3f602aa7/",
        "iat": "1568634305",
        "nbf": "1568634305",
        "exp": "1568663405",
        "aio": "42FgYJj27NRhG75PrT4neHcrsynEAQA=",
        "appid": "4962773b-9cdb-44cf-a8bf-237846a00ab7",
        "appidacr": "2",
        "http://schemas.microsoft.com/identity/claims/identityprovider": "https://sts.windows.net/8fbbacd5-a58a-4a92-995c-182e3f602aa7/",
        "http://schemas.microsoft.com/identity/claims/objectidentifier": "728b90e9-040b-473c-98f1-323d7436b51c",
        "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "728b90e9-040b-473c-98f1-323d7436b51c",
        "http://schemas.microsoft.com/identity/claims/tenantid": "8fbbacd5-a58a-4a92-995c-182e3f602aa7",
        "uti": "iKA6eqdAl02nibGG5dJKAA",
        "ver": "1.0"
    },
    "correlationId": "81778fa7-a4f6-4a7c-a4ad-8672b54aaa43",
    "description": "",
    "eventDataId": "d669040b-6e15-47c7-95ab-cc106cf47100",
    "eventName": {
        "value": "EndRequest",
        "localizedValue": "EndRequest"
    },
    "category": {
        "value": "Administrative",
        "localizedValue": "Administrative"
    },
    "eventTimestamp": "2019-09-16T11:50:05.9756021Z",
    "id": "/subscriptions/122b193c-4d4a-4a9d-90f1-a86efa84b58d/resourceGroups/Toggen-EventTest/providers/Microsoft.Storage/storageAccounts/tgnsq/events/d669040b-6e15-47c7-95ab-cc106cf47100/ticks/637042314059756021",
    "level": "Error",
    "operationId": "81778fa7-a4f6-4a7c-a4ad-8672b54aaa43",
    "operationName": {
        "value": "Microsoft.Storage/storageAccounts/listAccountSas/action",
        "localizedValue": "Microsoft.Storage/storageAccounts/listAccountSas/action"
    },
    "resourceGroupName": "Toggen-EventTest",
    "resourceProviderName": {
        "value": "Microsoft.Storage",
        "localizedValue": "Microsoft.Storage"
    },
    "resourceType": {
        "value": "Microsoft.Storage/storageAccounts",
        "localizedValue": "Microsoft.Storage/storageAccounts"
    },
    "resourceId": "/subscriptions/122b193c-4d4a-4a9d-90f1-a86efa84b58d/resourceGroups/Toggen-EventTest/providers/Microsoft.Storage/storageAccounts/tgnsq",
    "status": {
        "value": "Failed",
        "localizedValue": "Failed"
    },
    "subStatus": {
        "value": "NotFound",
        "localizedValue": "NotFound"
    },
    "submissionTimestamp": "2019-09-16T11:51:37.1962247Z",
    "subscriptionId": "122b193c-4d4a-4a9d-90f1-a86efa84b58d",
    "properties": {
        "statusCode": "NotFound",
        "serviceRequestId": null,
        "statusMessage": "{\"error\":{\"code\":\"ResourceGroupNotFound\",\"message\":\"Resource group 'Toggen-EventTest' could not be found.\"}}"
    },
    "relatedEvents": []
}

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

You May Also Like…

Toggen builds a new website

So I have built and hosted a new website for Roger Clark Pest Management they are a family owned and operated Pest...

WizTree

Just downloaded WizTree (not a sponsor) from https://wiztreefree.com/ It seems to do what it says on the tin which is...

Scam call from “Telstra”

Just had a call from a man with a sub-continental accent from caller ID 0734946596 Told me there was problem with my...