LastAccessTimeBasedTracking is not supported for the account

[sschmeck]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform (and AzureRM Provider) Version

Terraform v0.14.10
hashicorp/azurerm v2.57.0

Affected Resource(s)

• azurerm_storage_account

Terraform Configuration Files

terraform {
  required_version = "0.14.10"
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "=2.57.0"
    }
  }
}

provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "rg" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_storage_account" "sa" {
  name                      = "examplesa"
  resource_group_name       = azurerm_resource_group.rg.name
  location                  = azurerm_resource_group.rg.location
  account_tier              = "Standard"
  account_kind              = "StorageV2"
  account_replication_type  = "LRS"
  enable_https_traffic_only = true
  is_hns_enabled            = true
  min_tls_version           = "TLS1_2"

  blob_properties {
    cors_rule {
      allowed_headers    = ["*"]
      allowed_methods    = ["GET"]
      allowed_origins    = ["*"]
      exposed_headers    = ["*"]
      max_age_in_seconds = "600"
    }
  }
}

Expected Behaviour

Apply complete! Resources: 2 added, 0 changed, 0 destroyed.

Actual Behaviour

Error: Error updating Azure Storage Account `blob_properties` "examplesa": storage.BlobServicesClient#SetServiceProperties: Failure sending request: StatusCode=409 -- Original Error: autorest/azure: Service returned an error. Status
=<nil> Code="FeatureNotSupportedForAccount" Message="LastAccessTimeBasedTracking is not supported for the account."

  on main.tf line 24, in resource "azurerm_storage_account" "sa":
  24: resource "azurerm_storage_account" "sa" {

Steps to Reproduce

1. terraform apply

Important Factoids

We used that setup for about 3 weeks but since Monday (May 24, 2021), the error above occurs. To reproduce the problem you need to setup is_hns_enabled = true together with the blob_properties block.

The problem occurs only with provider version >=2.57.0 and seems related to the PR #11301.

References

• azurerm_storage_accountsupport for change_feed, versioning_enabled, default_service_version , and last_access_time_enabled within the blob_properties` block #11301
• OperationNotAllowedOnKind when attempting to set blob_properties on StorageV2 storage_account #11772

[TPPWC]

We face the same problem. We are working with Modules:

dynamic "delete_retention_policy" {
      for_each = var.blob_delete_retention_policy != 0 ? [1] : []
      content {
        days = var.blob_delete_retention_policy
      }
    }

We are deploying to west europe.

kr

tom

[yriveiro]

We face the same problem. We are working with Modules:

dynamic "delete_retention_policy" {
      for_each = var.blob_delete_retention_policy != 0 ? [1] : []
      content {
        days = var.blob_delete_retention_policy
      }
    }

We are deploying to west europe.

kr

tom

Same configuration, same version, same bug.

[sschmeck]

Fixed with version 2.62.0. Thanks, @yupwei68.

[ghost]

This has been released in version 2.63.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 2.63.0"
}
# ... other configuration ...

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.