title: Connecting storage securely to Azure Data Lake Analytics or Data Factory
body: <p>I am setting up a new Azure Data Lake Analytics (ADLA) PAAS service to run USQL against some existing data sets in blob storage. The blob storage is firewalled for security and when I try to add the storage account to the data sources in ADLA I get the following error. Similar happens for data factory.</p>
  
  <blockquote>
    <p>InvalidArgument: The Storage account '' or its accessKey
    is invalid.</p>
  </blockquote>
  
  <p>If I disable the firewall, the storage account can be successfully added. I have tried to add the relevant <a href="https://www.microsoft.com/en-gb/download/details.aspx?id=41653" rel="nofollow noreferrer">Azure Data Center IP Address ranges</a> but the connection still fails. I have also ticked the "Allow trusted Microsoft Services box" but this <a href="https://docs.microsoft.com/en-gb/azure/storage/common/storage-network-security#exceptions" rel="nofollow noreferrer">does not seem include data lake or data factory</a>. How do I access my storage account from ADLA but still have it secured? </p>