Additional restrictions are required when copying between storage accounts using private endpoints in the hub-spoke topology.

[SeungJeongYang]

[Enter feedback here]

Based on the link below, it can be expected that the client performing azcopy will execute successfully as long as there is communication established each source and destination.

If the client is located in the Hub VNet and the source/destination storage accounts are located in each spoke Vnet, executing azcopy may result in a 403 error.

There are two mitigations as follows:

1.Configure a direct peering between the Spoke VNet where the Source SA is located and the VNet where the Destination is located.

2.Connect both the Source SA and Destination SA to a Private Endpoint located in the same VNet.

Conclusion I expect that adding the above information to the document will be beneficial to users.

https://learn.microsoft.com/en-us/troubleshoot/azure/azure-storage/storage-use-azcopy-troubleshoot?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json&bc=%2Fazure%2Fstorage%2Fblobs%2Fbreadcrumb%2Ftoc.json#transfer-data-between-storage-accounts

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 15911160-5ba2-fb0a-0b24-16b3857e20ce
• Version Independent ID: d925bc9f-f825-2f82-168c-6c30d716b9ce
• Content: Copy or move data to Azure Storage by using AzCopy v10
• Content Source: articles/storage/common/storage-use-azcopy-v10.md
• Service: storage
• Sub-service: common
• GitHub Login: @normesta
• Microsoft Alias: normesta

[AjayBathini-MSFT]

@SeungJeongYang Thanks for your feedback! We will investigate and update as appropriate.

[YashikaTyagii]

@SeungJeongYang Thanks for your feedback! We will investigate and update as appropriate.

[SeungJeongYang]

@YashikaTyagii Thanks for taking it. Could please let me know progress?

[SeungJeongYang]

@YashikaTyagii May I know the progress regarding this feedback?

[normesta]

Thank you for sharing this information! Our engineering team is working on an article to clear some of this up. Once that is published, we'll likely add notes to multiple articles. The subject is more around copying blobs between storage accounts and less about AzCopy per se. However, the AzCopy article will make a great target to route readers to the article that is being created. Thank you for your insights here.

#please-close