ListAccountSAS Error in Azure Activity Log

Written by James McDonald

September 16, 2019

So getting an error after doing a heap of study with an Azure Free Trial Account and deleting all my resource groups every night

But an error kept appearing every minute in the Activity Log

You can see the JSON of the error below. (And if you are worried about security I found and replaced all the UUID’s with new UUID’s)

So to fix this I had to recreate the resource group Toggen-EventTest then create the storage account tgnsq

I then went into the “Events” pane in the tgnsq storage account and found under the Event Subscription tab an event subscription (I think I named it tgnsq-eventsub1) that hadn’t been deleted during the original storage account deletion. After deleting this the ListAccountSAS events stopped after a few minutes

Another thing I did, and I don’t know if this helped or not, was to click on the Connectivity Check blade and check that this was OK. I found two similar to the following errors.

Failed to list queues: code: AuthorizationPermissionMismatch content:  message: This request is not authorized to perform this operation using this permission. RequestId:242ad2e8-e003-00c4-6a89-6ca69f000000 Time:2019-09-16T12:25:56.8762342Z name: StorageError requestId: 242ad2e8-e003-00c4-6a89-6ca69f000000 url: https://tgnsq.queue.core.windows.net/?comp=list&_=1568636753116 xhr: {}

I added myself to the Storage Blob Data Contributor and Storage Queue Data Contributor roles. Log out and back in and now everything was working where the error occurred under Blob service (Azure AD) and Queue service (Azure AD)

{
    "authorization": {
        "action": "Microsoft.Storage/storageAccounts/listAccountSas/action",
        "scope": "/subscriptions/122b193c-4d4a-4a9d-90f1-a86efa84b58d/resourceGroups/Toggen-EventTest/providers/Microsoft.Storage/storageAccounts/tgnsq"
    },
    "caller": "728b90e9-040b-473c-98f1-323d7436b51c",
    "channels": "Operation",
    "claims": {
        "aud": "https://management.core.windows.net/",
        "iss": "https://sts.windows.net/8fbbacd5-a58a-4a92-995c-182e3f602aa7/",
        "iat": "1568634305",
        "nbf": "1568634305",
        "exp": "1568663405",
        "aio": "42FgYJj27NRhG75PrT4neHcrsynEAQA=",
        "appid": "4962773b-9cdb-44cf-a8bf-237846a00ab7",
        "appidacr": "2",
        "http://schemas.microsoft.com/identity/claims/identityprovider": "https://sts.windows.net/8fbbacd5-a58a-4a92-995c-182e3f602aa7/",
        "http://schemas.microsoft.com/identity/claims/objectidentifier": "728b90e9-040b-473c-98f1-323d7436b51c",
        "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "728b90e9-040b-473c-98f1-323d7436b51c",
        "http://schemas.microsoft.com/identity/claims/tenantid": "8fbbacd5-a58a-4a92-995c-182e3f602aa7",
        "uti": "iKA6eqdAl02nibGG5dJKAA",
        "ver": "1.0"
    },
    "correlationId": "81778fa7-a4f6-4a7c-a4ad-8672b54aaa43",
    "description": "",
    "eventDataId": "d669040b-6e15-47c7-95ab-cc106cf47100",
    "eventName": {
        "value": "EndRequest",
        "localizedValue": "EndRequest"
    },
    "category": {
        "value": "Administrative",
        "localizedValue": "Administrative"
    },
    "eventTimestamp": "2019-09-16T11:50:05.9756021Z",
    "id": "/subscriptions/122b193c-4d4a-4a9d-90f1-a86efa84b58d/resourceGroups/Toggen-EventTest/providers/Microsoft.Storage/storageAccounts/tgnsq/events/d669040b-6e15-47c7-95ab-cc106cf47100/ticks/637042314059756021",
    "level": "Error",
    "operationId": "81778fa7-a4f6-4a7c-a4ad-8672b54aaa43",
    "operationName": {
        "value": "Microsoft.Storage/storageAccounts/listAccountSas/action",
        "localizedValue": "Microsoft.Storage/storageAccounts/listAccountSas/action"
    },
    "resourceGroupName": "Toggen-EventTest",
    "resourceProviderName": {
        "value": "Microsoft.Storage",
        "localizedValue": "Microsoft.Storage"
    },
    "resourceType": {
        "value": "Microsoft.Storage/storageAccounts",
        "localizedValue": "Microsoft.Storage/storageAccounts"
    },
    "resourceId": "/subscriptions/122b193c-4d4a-4a9d-90f1-a86efa84b58d/resourceGroups/Toggen-EventTest/providers/Microsoft.Storage/storageAccounts/tgnsq",
    "status": {
        "value": "Failed",
        "localizedValue": "Failed"
    },
    "subStatus": {
        "value": "NotFound",
        "localizedValue": "NotFound"
    },
    "submissionTimestamp": "2019-09-16T11:51:37.1962247Z",
    "subscriptionId": "122b193c-4d4a-4a9d-90f1-a86efa84b58d",
    "properties": {
        "statusCode": "NotFound",
        "serviceRequestId": null,
        "statusMessage": "{\"error\":{\"code\":\"ResourceGroupNotFound\",\"message\":\"Resource group 'Toggen-EventTest' could not be found.\"}}"
    },
    "relatedEvents": []
}

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

The reCAPTCHA verification period has expired. Please reload the page.

You May Also Like…

Squarespace Image Export

To gain continued access to your Squarespace website images after cancelling your subscription you have several...

MySQL 8.x GRANT ALL STATEMENT

-- CREATE CREATE USER 'tgnrestoreuser'@'localhost' IDENTIFIED BY 'AppleSauceLoveBird2024'; GRANT ALL PRIVILEGES ON...

Exetel Opt-Out of CGNAT

If your port forwards and inbound and/or outbound site-to-site VPN's have failed when switching to Exetel due to their...