When using an existing storage account, it must allow access using SAS

[aelij]

With BYO storage account (as demonstrated in the "Access private virtual network" section), the storage account must specify allowSharedKeyAccess: true or ACI will have an obscure error FailedMountAzureFileVolume, and the deployment script will have a resource creation timeout error, DeploymentScriptACIProvisioningTimeout.

Please add a note that indicates allowSharedKeyAccess: true is required (even though access is done using RBAC, which suggests it would not be needed).

Also, this might be an ACI issue and not just a deployment script issue (have not tested it using ACI directly), so please update those docs as well if relevant.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: b5c4c8c5-7757-a969-5800-17f2f2312649
• Version Independent ID: 9ced8dd5-43ca-6d1f-c054-842299db8327
• Content: Use deployment scripts in templates - Azure Resource Manager
• Content Source: articles/azure-resource-manager/templates/deployment-script-template.md
• Service: azure-resource-manager
• Sub-service: templates
• GitHub Login: @mumian
• Microsoft Alias: jgao

[ManoharLakkoju-MSFT]

@aelij Thanks for your feedback! We will investigate and update as appropriate.

[mumian]

Confirmed the setting change with Subha.

PR for addressing the content issue - https://github.com/MicrosoftDocs/azure-docs-pr/pull/271672

[mumian]

PR merged.

#please-close