Skip to content

server‑side AzCopy transfers consistently failing with 403 AuthorizationFailure #8970

@m-eshtiaghy

Description

@m-eshtiaghy

The issue involves server‑side AzCopy transfers consistently failing with 403 AuthorizationFailure when attempting to write to the destination Azure Blob Storage. All GET operations succeed without issue, but every PUT request fails immediately during block commit. This behavior persists even when using SAS tokens that explicitly include full permissions (Read, Add, Create, Write, Delete, List) in destination storage account and the correct resource types (Service, Container, Object).
The source storage account is located in another tenant, and the operator is accessing the destination tenant using a guest account. Multiple SAS tokens (UDSAS and Account SAS) were generated and validated, but the destination storage account continues rejecting write operations while still allowing reads and listings.
As an additional verification step, Azure Storage Explorer was used to manually copy/paste files into the same destination container. This operation also fails, returning the error:

{
"name": null,
"message": ""UnexpectedCancel""
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions