> ## Content Index
> Fetch the complete content index at: https://codeisahighway.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# "The remote server returned an error: (400) Bad Request. " when specifying ACL on an #Azure premium storage container
- URL: https://codeisahighway.com/the-remote-server-returned-an-error-400-bad-request-when-specifying-acl-on-an-azure-premium-storage-container/
- Published: 2015-05-08T18:09:17.000Z
- Updated: 2026-07-31T19:44:58.000Z
- Author: Stephane Lapointe
- Tags: PowerShell, DevOps, Automation, Microsoft Azure, Security, Storage, #Import 2023-07-11 16:44, #Import 2026-09-04 10:31, #Import 2026-09-04 13:56

updated: May 10th 2015 - Added SAS workaround

I played quite a bit with Azure Premium storage accounts recently and I have to say that I welcome with arms wide open this new performance level. Especially for dev/test environments in Azure. Even if I deeply think that this is what we should have had in the first place or at least something in between the latency of XIO and a standard storage account.

It is good to know that

> Premium Storage supports only Azure page blobs, which are used to hold persistent disks for Azure Virtual Machines (VMs)

To create a premium storage account, you declare as "Premium\_LRS" or "Premium-LRS" depending if you are using PowerShell scripts or Azure Resource Manager templates.

During my tests and scripts migration to use the new storage account type faced an error message.

Given the following code:

```
New-AzureStorageAccount -StorageAccountName 'myaccount3456485' -Type Premium_LRS -Location 'East US 2'

New-AzureStorageContainer -Name 'myaccount3456485' -Permission Blob

```

this cause the following error:

> New-AzureStorageContainer : The remote server returned an error: (400) Bad Request. HTTP Status Code: 400 - HTTP Error Message: One  
> of the headers specified in the request is not supported.  
> At C:\\Temp\\Demos\\New-DevTestEnvironmentFromPowerShell.ps1:32 char:1

- New-AzureStorageContainer -Name 'myaccount3456485' -Permission Blob

If you either specify `Container` or `Blob` permission you will end up with this error message. You won't have this error if you specify `Off` or if you don't specify the `-Permission` parameter.

The only think I know is that it's not yet supported. No official word about when it will be, but I'm pretty sure it's only a matter of time before we see it working.

### Workaround

You can use SAS (Shared Access Signature) to mimic the public permission on a container or blob. Be sure to remember that if you change the storage keys, this will invalidate the SAS you generated with them.

As a last resort, you could still use a standard storage account but you won't get the same performance.

### Reference

- [Premium Storage: High-Performance Storage for Azure Virtual Machine Workloads](http://azure.microsoft.com/en-us/documentation/articles/storage-premium-storage-preview-portal/?rnd=1&ref=codeisahighway.com)
- [Shared Access Signatures, Part 1: Understanding the SAS Model](http://azure.microsoft.com/en-us/documentation/articles/storage-dotnet-shared-access-signature-part-1/?ref=codeisahighway.com)