New-AzDataMigrationSqlServerSchema - Public access to blob denied for SqlSchemaMigration.zip.

[DavidMMaxwell]

Description

Attempting to run schema migration using New-AzDataMigrationSqlServerSchema. Have tried running this locally on my laptop and directly on the Azure SQL IaaS VM source. Failing on access to https://migrationapps.blob.core.windows.net/schemamigration/SqlSchemaMigration.zip.

Issue script & Debug output

C:\Users\damaxwel> New-AzDataMigrationSqlServerSchema `
>>     -Action "MigrateSchema" `
>>     -SourceConnectionString "Server=sqlvm1;Initial Catalog=AdventureWorks;User ID=<removed>;Password=<removed>" `
>>     -TargetConnectionString "Server=dmmextsqlsrvr1.database.windows.net;Initial Catalog=AdvWorksDMSTest;User ID=<removed>;Password=<removed>"
Downloading and extracting latest SchemaMigration Zip file...
Invoke-RestMethod: C:\Program Files\WindowsPowerShell\Modules\Az.DataMigration\0.14.9\DataMigration.Autorest\custom\Cmdlets\New-AzDataMigrationSqlServerSchema.ps1:99:17
Line |
  99 |  …             Invoke-RestMethod -Uri $ZipSource -OutFile $ZipDestinatio …
     |                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     | PublicAccessNotPermittedPublic access is not permitted on this storage account.
     | RequestId:a5a5d066-801e-0061-765a-7e9134000000 Time:2025-02-13T20:58:17.9460520Z
PS C:\Users\damaxwel>

Environment data

PS C:\Users\damaxwel> $PSVersionTable

Name                           Value
----                           -----
PSVersion                      7.5.0
PSEdition                      Core
GitCommitId                    7.5.0
OS                             Microsoft Windows 10.0.26100
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Module versions

PS C:\Users\damaxwel> import-module Az
PS C:\Users\damaxwel> Get-Module Az*  

ModuleType Version    PreRelease Name                                ExportedCommands
---------- -------    ---------- ----                                ----------------
Script     12.3.0                Az
Script     4.0.2                 Az.Accounts                         {Add-AzEnvironment, Clear-AzConfig, Clear-AzCont… 
Script     2.0.1                 Az.Advisor                          {Disable-AzAdvisorRecommendation, Enable-AzAdvis… 
Script     6.0.4                 Az.Aks                              {Disable-AzAksAddOn, Enable-AzAksAddOn, Get-AzAk… 
Script     1.1.5                 Az.AnalysisServices                 {Add-AzAnalysisServicesAccount, Export-AzAnalysi… 
Script     4.0.4                 Az.ApiManagement                    {Add-AzApiManagementApiToGateway, Add-AzApiManag… 
Script     1.0.1                 Az.App                              {Disable-AzContainerAppRevision, Enable-AzContai… 
Script     1.3.2                 Az.AppConfiguration                 {Clear-AzAppConfigurationDeletedStore, Get-AzApp… 
Script     2.2.5                 Az.ApplicationInsights              {Get-AzApplicationInsights, Get-AzApplicationIns… 
Script     1.0.1                 Az.ArcResourceBridge                {Get-AzArcResourceBridge, Get-AzArcResourceBridg… 
Script     2.0.2                 Az.Attestation                      {Add-AzAttestationPolicySigner, Get-AzAttestatio… 
Script     1.0.2                 Az.Automanage                       {Get-AzAutomanageBestPractice, Get-AzAutomanageC…
Script     1.10.0                Az.Automation                       {Export-AzAutomationDscConfiguration, Export-AzA… 
Script     3.6.3                 Az.Batch                            {Disable-AzBatchAutoScale, Disable-AzBatchComput… 
Script     2.0.4                 Az.Billing                          {Get-AzBillingAccount, Get-AzBillingInvoice, Get… 
Script     3.2.2                 Az.Cdn                              {Clear-AzCdnEndpointContent, Clear-AzFrontDoorCd… 
Script     2.0.1                 Az.CloudService                     {Get-AzCloudService, Get-AzCloudServiceInstanceV… 
Script     1.14.1                Az.CognitiveServices                {Add-AzCognitiveServicesAccountNetworkRule, Get-… 
Script     8.3.0                 Az.Compute                          {Add-AzImageDataDisk, Add-AzVhd, Add-AzVMAdditio… 
Script     1.0.1                 Az.ConfidentialLedger               {Get-AzConfidentialLedger, New-AzConfidentialLed… 
Script     4.0.2                 Az.ContainerInstance                {Add-AzContainerInstanceOutput, Get-AzContainerG… 
Script     4.2.1                 Az.ContainerRegistry                {Connect-AzContainerRegistry, Get-AzContainerReg… 
Script     1.14.5                Az.CosmosDB                         {Get-AzCosmosDBAccount, Get-AzCosmosDBAccountKey…
Script     1.1.1                 Az.DataBoxEdge                      {Get-AzDataBoxEdgeBandwidthSchedule, Get-AzDataB… 
Script     1.9.0                 Az.Databricks                       {Get-AzDatabricksAccessConnector, Get-AzDatabric… 
Script     1.18.7                Az.DataFactory                      {Add-AzDataFactoryV2DataFlowDebugSessionPackage,… 
Script     1.0.3                 Az.DataLakeAnalytics                {Add-AzDataLakeAnalyticsDataSource, Add-AzDataLa… 
Script     1.3.2                 Az.DataLakeStore                    {Add-AzDataLakeStoreFirewallRule, Add-AzDataLake… 
Script     0.14.9                Az.DataMigration                    {Get-AzDataMigrationProject, Get-AzDataMigration… 
Script     2.4.0                 Az.DataProtection                   {Backup-AzDataProtectionBackupInstanceAdhoc, Edi… 
Script     1.0.2                 Az.DataShare                        {Get-AzDataShare, Get-AzDataShareAccount, Get-Az… 
Script     4.3.1                 Az.DesktopVirtualization            {Disconnect-AzWvdUserSession, Expand-AzWvdMsixIm… 
Script     1.2.0                 Az.DevCenter                        {Connect-AzDevCenterAdminCatalog, Connect-AzDevC… 
Script     1.0.3                 Az.DevTestLabs                      {Get-AzDtlAllowedVMSizesPolicy, Get-AzDtlAutoShu… 
Script     1.2.1                 Az.Dns                              {Add-AzDnsRecordConfig, Get-AzDnsRecordSet, Get-… 
Script     1.0.0                 Az.DnsResolver                      {Get-AzDnsForwardingRuleset, Get-AzDnsForwarding…
Script     1.0.3                 Az.ElasticSan                       {Add-AzElasticSanVolumeGroupNetworkRule, Get-AzE… 
Script     2.0.0                 Az.EventGrid                        {Disable-AzEventGridPartnerTopic, Enable-AzEvent… 
Script     5.0.0                 Az.EventHub                         {New-AzEventHubAuthorizationRuleSASToken, Approv… 
Script     1.11.1                Az.FrontDoor                        {Disable-AzFrontDoorCustomDomainHttps, Enable-Az… 
Script     4.1.0                 Az.Functions                        {Get-AzFunctionApp, Get-AzFunctionAppAvailableLo… 
Script     6.2.0                 Az.HDInsight                        {Add-AzHDInsightClusterIdentity, Add-AzHDInsight… 
Script     2.0.1                 Az.HealthcareApis                   {Get-AzHealthcareApisService, Get-AzHealthcareAp… 
Script     2.7.7                 Az.IotHub                           {Add-AzIotHubCertificate, Add-AzIotHubConfigurat… 
Script     6.1.0                 Az.KeyVault                         {Add-AzKeyVaultCertificate, Add-AzKeyVaultCertif… 
Script     2.3.1                 Az.Kusto                            {Add-AzKustoClusterLanguageExtension, Add-AzKust… 
Script     1.0.1                 Az.LoadTesting                      {Get-AzLoad, New-AzLoad, Remove-AzLoad, Update-A…
Script     1.5.1                 Az.LogicApp                         {Get-AzIntegrationAccount, Get-AzIntegrationAcco… 
Script     1.1.4                 Az.MachineLearning                  {Add-AzMlWebServiceRegionalProperty, Export-AzMl… 
Script     1.1.0                 Az.MachineLearningServices          {Get-AzMLServiceQuota, Get-AzMLServiceUsage, Get… 
Script     1.4.3                 Az.Maintenance                      {Get-AzApplyUpdate, Get-AzConfigurationAssignmen… 
Script     1.2.1                 Az.ManagedServiceIdentity           {Get-AzFederatedIdentityCredential, Get-AzSystem… 
Script     3.0.1                 Az.ManagedServices                  {Get-AzManagedServicesAssignment, Get-AzManagedS… 
Script     2.0.1                 Az.MarketplaceOrdering              {Get-AzMarketplaceTerms, Invoke-AzMarketplaceSig… 
Script     1.1.2                 Az.Media                            {Get-AzMediaService, Get-AzMediaServiceKey, Get-… 
Script     2.4.0                 Az.Migrate                          {Get-AzMigrateDiscoveredServer, Get-AzMigrateHCI… 
Script     5.2.1                 Az.Monitor                          {Add-AzLogProfile, Add-AzMetricAlertRule, Add-Az… 
Script     1.2.1                 Az.MySql                            {Get-AzMySqlConfiguration, Get-AzMySqlConnection… 
Script     7.8.1                 Az.Network                          {Add-AzApplicationGatewayAuthenticationCertifica…
Script     1.0.2                 Az.NetworkCloud                     {Deploy-AzNetworkCloudCluster, Disable-AzNetwork… 
Script     1.1.0                 Az.Nginx                            {Get-AzNginxCertificate, Get-AzNginxConfiguratio… 
Script     1.1.3                 Az.NotificationHubs                 {Get-AzNotificationHub, Get-AzNotificationHubAut… 
Script     3.2.1                 Az.OperationalInsights              {Disable-AzOperationalInsightsIISLogCollection, … 
Script     1.0.0                 Az.Oracle                           {Add-AzOracleCloudVMClusterVM, Get-AzOracleAuton… 
Script     1.6.5                 Az.PolicyInsights                   {Get-AzPolicyAttestation, Get-AzPolicyEvent, Get… 
Script     1.1.2                 Az.PostgreSql                       {Get-AzPostgreSqlConfiguration, Get-AzPostgreSql… 
Script     2.0.0                 Az.PowerBIEmbedded                  {Get-AzPowerBIEmbeddedCapacity, New-AzPowerBIEmb… 
Script     1.0.5                 Az.PrivateDns                       {Add-AzPrivateDnsRecordConfig, Get-AzPrivateDnsR… 
Script     7.1.0                 Az.RecoveryServices                 {Add-AzRecoveryServicesAsrReplicationProtectedIt… 
Script     1.10.0                Az.RedisCache                       {Clear-AzRedisCache, Export-AzRedisCache, Get-Az… 
Script     1.2.1                 Az.RedisEnterpriseCache             {Export-AzRedisEnterpriseCache, Get-AzRedisEnter…
Script     2.0.1                 Az.Relay                            {Get-AzRelayAuthorizationRule, Get-AzRelayHybrid… 
Script     1.0.0                 Az.ResourceGraph                    {Search-AzGraph, Get-AzResourceGraphQuery, New-A… 
Script     1.2.1                 Az.ResourceMover                    {Add-AzResourceMoverMoveResource, Get-AzResource… 
Script     7.4.0                 Az.Resources                        {Export-AzResourceGroup, Export-AzTemplateSpec, … 
Script     1.7.0                 Az.Security                         {Add-AzSecurityAdaptiveNetworkHardening, Add-AzS… 
Script     3.1.2                 Az.SecurityInsights                 {Get-AzSentinelAlertRule, Get-AzSentinelAlertRul… 
Script     4.0.0                 Az.ServiceBus                       {New-AzServiceBusAuthorizationRuleSASToken, Test… 
Script     3.3.4                 Az.ServiceFabric                    {Add-AzServiceFabricClientCertificate, Add-AzSer… 
Script     2.0.2                 Az.SignalR                          {Get-AzSignalR, Get-AzSignalRKey, Get-AzSignalRU… 
Script     5.3.0                 Az.Sql                              {Add-AzSqlDatabaseToFailoverGroup, Add-AzSqlElas… 
Script     2.3.1                 Az.SqlVirtualMachine                {Assert-AzSqlVMEntraAuth, Get-AzAvailabilityGrou… 
Script     2.4.0                 Az.StackHCI                         {Add-AzStackHCIVMAttestation, Disable-AzStackHCI… 
Script     1.0.4                 Az.StackHCIVM                       {Add-AzStackHCIVMVirtualMachineDataDisk, Add-AzS…
Script     7.3.0                 Az.Storage                          {Add-AzRmStorageContainerLegalHold, Add-AzStorag… 
Script     1.4.0                 Az.StorageMover                     {Get-AzStorageMover, Get-AzStorageMoverAgent, Ge… 
Script     2.3.1                 Az.StorageSync                      {Get-AzStorageSyncCloudEndpoint, Get-AzStorageSy… 
Script     2.0.1                 Az.StreamAnalytics                  {Get-AzStreamAnalyticsCluster, Get-AzStreamAnaly… 
Script     2.0.0                 Az.Support                          {Get-AzSupportChatTranscript, Get-AzSupportChatT… 
Script     3.0.10                Az.Synapse                          {Add-AzSynapseDataFlowDebugSessionPackage, Add-A… 
Script     1.2.2                 Az.TrafficManager                   {Add-AzTrafficManagerCustomHeaderToEndpoint, Add… 
Script     3.2.1                 Az.Websites                         {Add-AzWebAppAccessRestrictionRule, Add-AzWebApp…

Error output

PS C:\Users\damaxwel> Resolve-AzError

   HistoryId: 1

Message        : Response status code does not indicate success: 409 (Public access is not permitted on this storage   
                 account.).
StackTrace     :    at System.Management.Automation.MshCommandRuntime.ThrowTerminatingError(ErrorRecord errorRecord)   
Exception      : Microsoft.PowerShell.Commands.HttpResponseException
InvocationInfo : {Invoke-RestMethod}
Line           :                 Invoke-RestMethod -Uri $ZipSource -OutFile $ZipDestination;

Position       : At C:\Program Files\WindowsPowerShell\Modules\Az.DataMigration\0.14.9\DataMigration.Autorest\custom\C 
                 mdlets\New-AzDataMigrationSqlServerSchema.ps1:99 char:17
                 + …             Invoke-RestMethod -Uri $ZipSource -OutFile $ZipDestinatio …
                 +               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 1

[ajayparwani]

Hi David,
The fix has been merged #27203 and should be available with next Powershell release.

[DavidMMaxwell]

Hi, Ajay. Thanks for the update and for the help. Much appreciated. Quick question: Customer is asking if this fix will also affect Azure CLI version of this as well? If not, should I put in a different request for Az CLI? Thanks, -David. ***@***.*** David M Maxwell (he/him) Cloud Solution Architect for SQL & Fabric If you have any feedback about my work, please let me know or you may contact my manager, Sunil Albert, at ***@***.******@***.***> From: Ajay Parwani ***@***.***> Sent: Monday, February 24, 2025 02:44 To: Azure/azure-powershell ***@***.***> Cc: Author ***@***.***> Subject: Re: [Azure/azure-powershell] New-AzDataMigrationSqlServerSchema - Public access to blob denied for SqlSchemaMigration.zip. (Issue #27117) Hi David, The fix has been merged #27203<#27203> and should be available with next Powershell release. - Reply to this email directly, view it on GitHub<#27117 (comment)> or unsubscribe<https://github.com/notifications/unsubscribe-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ou are receiving this email because you authored the thread. Triage notifications on the go with GitHub Mobile for iOS<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[ajayparwani]

Hi David,
This fix was also made for Az CLI Azure/azure-cli-extensions#8502 and should be available with the next release.

[abhims14]

Closing the issue as per Ajay's comment.