Storage Account Creation Fails When Deploying Loome Assist Agent to ACI with VNet

What Happened?

When deploying a Loome Assist agent in an Azure Container Instance (ACI) into a virtual network (VNet), the process required to create an Azure Storage account will fail.

Issue:

The Loome Assist agent attempts to create a new storage account but fails.

Impact:

This failure prevents Loome Assist agent from generating resource usage and spending data.

Error:

[07:29:29 ERR] [1eXXXXXXXfe7] Unable to create storage account 'aid7sid1eXXXXXX10b' with table storage
System.ArgumentNullException: Value cannot be null. (Parameter 'id')
   at Azure.ResourceManager.Argument.AssertNotNull[T](T value, String name)
   at Azure.ResourceManager.ArmResource..ctor(ArmClient client, ResourceIdentifier id)
   at Azure.ResourceManager.Storage.StorageAccountResource..ctor(ArmClient client, ResourceIdentifier id)
   at Azure.ResourceManager.Storage.StorageAccountResource..ctor(ArmClient client, StorageAccountData data)
   at Azure.ResourceManager.Storage.StorageAccountOperationSource.Azure.Core.IOperationSource<Azure.ResourceManager.Storage.StorageAccountResource>.CreateResultAsync(Response response, CancellationToken cancellationToken)
   at Azure.Core.NextLinkOperationImplementation.OperationToOperationOfT`1.UpdateStateAsync(Boolean async, CancellationToken cancellationToken)
   at Azure.Core.OperationInternal`1.UpdateStatusAsync(Boolean async, CancellationToken cancellationToken)

Root Cause:

This issue occurs because the new storage account, which is needed for temporarily storing usage data, inherits the same VNet and subnet configuration as the ACI. For a storage account to be created within or accessed from a specific subnet, Azure requires the Microsoft.Storage service endpoint to be enabled on that subnet. If this endpoint is missing, the creation fails.

How can you fix it?

Resolution

Enabling the Microsoft.Storage service endpoint on your subnet is a required step for deploying the Loome Assist agent to an ACI within a VNet, as this permits the automatic creation of its necessary storage account.

  1. Navigate to your Virtual Network in the Azure Portal.
  2. In the settings menu on the left, select Subnets.
  3. Click on the specific subnet that you’ve designated for the ACI. resolution2
  4. In the configuration panel that opens, find the Service Endpoints section.
  5. From the Services dropdown menu, select Microsoft.Storage.
  6. Click Save to apply the changes. resolution1