Skip to content

Commit e9ec661

Browse files
authored
Format REST API Table
Added a table detailing operations that require the x-ms-copy-source request header.
1 parent 2d54748 commit e9ec661

1 file changed

Lines changed: 16 additions & 1 deletion

File tree

articles/storage/common/security-restrict-copy-operations.md

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,22 @@ The **AllowedCopyScope** property of a storage account is used to specify the en
3434
- **Microsoft Entra ID**: Permits copying only from accounts within the same Microsoft Entra tenant as the destination account.
3535
- **PrivateLink**: Permits copying only from storage accounts that have private links to the same virtual network as the destination account.
3636

37-
This setting applies to [Put Block From Url](/rest/api/storageservices/put-block-from-url?tabs=microsoft-entra-id), [Append Block From Url](/rest/api/storageservices/append-block-from-url?tabs=microsoft-entra-id), [Put Blob From Url](/rest/api/storageservices/put-blob-from-url?tabs=microsoft-entra-id), [Put Page From Url](/rest/api/storageservices/put-page-from-url?tabs=microsoft-entra-id), [Copy Blob](/rest/api/storageservices/copy-blob), [Copy Blob From URL](/rest/api/storageservices/copy-blob-from-url), [Incremental Copy Blob](/rest/api/storageservices/incremental-copy-blob?tabs=microsoft-entra-id), [Put Range From Url](/rest/api/storageservices/put-range-from-url), and [Copy File](/rest/api/storageservices/copy-file) operations that require the x-ms-copy-source request header. Solutions such as [AzCopy](/azure/storage/common/storage-use-azcopy-v10) that rely on these APIs will be impacted by this setting. Please review the APIs associated with other features and services to ensure compatibility.
37+
The following table details operations that require the `x-ms-copy-source` request header that this setting applies to:
38+
39+
| REST API | Permitted scope applies |
40+
| --- | --- |
41+
| [Put Block From Url](/rest/api/storageservices/put-block-from-url?tabs=microsoft-entra-id) | Yes |
42+
| [Append Block From Url](/rest/api/storageservices/append-block-from-url?tabs=microsoft-entra-id) | Yes |
43+
| [Put Blob From Url](/rest/api/storageservices/put-blob-from-url?tabs=microsoft-entra-id) | Yes |
44+
| [Put Page From Url](/rest/api/storageservices/put-page-from-url?tabs=microsoft-entra-id) | Yes |
45+
| [Copy Blob](/rest/api/storageservices/copy-blob) | Yes |
46+
| [Copy Blob From URL](/rest/api/storageservices/copy-blob-from-url) | Yes |
47+
| [Incremental Copy Blob](/rest/api/storageservices/incremental-copy-blob) | Yes |
48+
| [Put Range From Url](/rest/api/storageservices/put-range-from-url) | Yes |
49+
| [Copy File](/rest/api/storageservices/copy-file) | Yes |
50+
51+
> [!NOTE]
52+
> Storage clients such as [AzCopy](/azure/storage/common/storage-use-azcopy-v10) that rely on these APIs will be impacted by this setting. Please review the APIs associated with other features and services to ensure compatibility.
3853
3954
The error “The copy operation is not within the allowed copy scope” indicates that the attempted copy operation falls outside the permitted scope for your account. Should you encounter the error “This request is not authorized to perform this operation” please verify whether permitted scope or a related firewall rule is denying the request.
4055

0 commit comments

Comments
 (0)