#Allow AvePoint Agent Servers to Access Your Storage Account

If you are using or plan to use your own storage device, read the instructions in this section carefully and complete the settings as needed. Otherwise, you can skip this topic.

When you are using your own storage device, you may have set up the storage firewall to only allow trusted clients for security concerns. To ensure that AvePoint Opus can access your storage, complete the settings as required in the following conditions:

• If you are using Microsoft Azure storage, refer to the following:

  • If your storage account is in the same data center as the one you use to sign up for AvePoint Online Services or your storage account is in its paired region, you must add the Azure Resource Manager (ARM) vNet subnets where the AvePoint agents are running on to your storage networking.

    You can find additional details in this Microsoft article: Grant access from a virtual network, and get the subnet ID of AvePoint Opus for your data center from Download ARM Vnet IDs. For detailed instructions on adding ARM Vnet IDs, refer to Add ARM Virtual Networks.

  • Other than the condition above, you need to add the reserved IP addresses to the Azure storage firewall.

    For detailed instructions, refer to Download a List of Reserved IP Addresses and Add Reserved IP Addresses.

• If you are using Amazon S3 in Southeast Asia (Singapore) data center, you need to add all the reserved IP addresses and specific VPC ID to the bucket policy.

  For details, refer to the Add Reserved IP Addresses and VPC ID to Amazon S3 Bucket Policy.

• If you are using a storage type other than Microsoft Azure storage and Amazon S3, you must add the reserved IP addresses to your storage firewall.

  For detailed instructions, refer to Download a List of Reserved IP Addresses and Add Reserved IP Addresses.