APIM API Deployment Failing in one of my Subscriptions with 409 Conflict

Question

APIM API Deployment Failing in one of my Subscriptions with 409 Conflict

Warren Kinley 136

I am deploying my APIs using the following bicep which has always worked, but yesterday it started failing in one subscription only:

Parsing error(s): Failed to import from specified resource 
https://st**********uks01.blob.core.windows.net/api-definitions/fshunt/Example%20API.openapi+json.json: 
The remote server returned an error: (409) Conflict..

I can see no locks in APIM and have tried deleting the existing API, but it still fails. The deployment completes successfully in other subscriptions.

Has anyone any idea what I can try and check?

Answer accepted by question author

1 additional answer

Your answer

Answer 1

Rakesh Mishra 3,795 Microsoft External Staff Moderator

Hi @Warren Kinley ,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Could you please try below troubleshooting steps and share your findings.

Test direct access to the blob URL from a machine you control (this verifies the URL/APIM will be able to reach it):
- Use curl (or a browser) to get the headers/status:
  curl -I "https://<storageaccount>.blob.core.windows.net/<container>/<path-to-file>.json?<SAS-token>"
- Expected: HTTP/1.1 200 OK and Content-Type: application/json (or at least 200). If you see 409, 403, 404, or 401, that tells you the storage side is the problem.
If curl returns 409 — inspect the blob state and container settings:
- Check for leases, legal holds, immutability policy, or rehydration in progress (these can produce 409 Conflict).
- See the blob error codes doc for exact error meanings - Azure Blob Storage error codes.
Try importing the same OpenAPI file via an alternate method (to isolate APIM portal vs. storage URL problem):
- Download the JSON to your workstation and import via APIM portal upload or via Azure CLI (az apim api import) using a local file. If that succeeds, the issue is definitely the remote URL access. See Import OpenAPI doc.

Warren Kinley 136 Reputation points

2025-12-04T11:40:31.78+00:00

Thankyou Rakesh it was the storage account and the subscription raising the 409, I had "Allow Blob anonymous access" disabled. The subscription now works I see the 200 response.
Rakesh Mishra 3,795 Reputation points Microsoft External Staff Moderator

2025-12-04T12:11:45.78+00:00
Please confirm if in 404 error details whether it is showing ContainerNotFound or BlobNotFound.

If ContainerNotFound, then try below

Go to the storage account in the Azure portal.

Under Data storage → Containers, select the relevant container.

Click “Change access level”.

Set Anonymous access level to either:

Blob (Public read access for blobs only) – safer and usually enough, or

Container (Public read access for container and blobs) if you also need to list blobs anonymously.

Save the change and wait a short while for it to propagate.

If BlobNotFound, then try below

double-check below in URL:

Account name in the hostname.

Container name (case-sensitive).

Blob name and path (case-sensitive).
Warren Kinley 136 Reputation points

2025-12-04T12:14:02.4166667+00:00

Hi Rakesh, I edited my previous comment since I realised the 404 was due to the access level on the containers were private, so now I am getting 200 response. Thank you
Rakesh Mishra 3,795 Reputation points Microsoft External Staff Moderator

2025-12-04T12:15:48.07+00:00

Thank you for confirmation. I have updated my comments to answer. If it was helpful, please accept it as an answer to help other community members.

Answer 2

The 409 Conflict error you are encountering during the deployment of your API in Azure API Management (APIM) typically indicates that there is a conflict with the current state of the resource you are trying to modify or create. Here are some steps you can take to troubleshoot and resolve the issue:

Check for Existing Resources: Ensure that the API you are trying to deploy does not already exist in the subscription where the deployment is failing. If it does, consider updating it instead of trying to create it anew.
Review API Definition: Make sure that the API definition you are trying to import is valid and accessible. The error message indicates a failure to import from a specified resource, which could mean that the resource is not available or there is a problem with the definition itself.
Check for Locks: Although you mentioned there are no locks, double-check the resource group and the APIM service to ensure that there are no locks preventing the deployment.
Retry the Deployment: Sometimes, transient issues can cause conflicts. Try redeploying after a short wait.
Check Quotas and Limits: Ensure that you have not exceeded any quotas or limits for your APIM instance in that subscription.
Examine Activity Logs: Look at the Azure Activity Logs for more detailed error messages or information regarding the failed deployment.
Compare with Working Subscriptions: Since the deployment works in other subscriptions, compare the configurations, policies, and settings between the working and failing subscriptions to identify any discrepancies.

If the issue persists after these checks, you may want to reach out to Azure support for further assistance.

References:

Share via

APIM API Deployment Failing in one of my Subscriptions with 409 Conflict

1 additional answer

Your answer