这可能是开放的issue。
因此，如果存储帐户中有network_rules。
根据容器获取网络规则，即先创建容器，然后应用网络规则。

resource "azurerm_storage_account" "terraform_storage" {
  name = var.storage_account_name
  resource_group_name = var.rg_name
  location = var.region
  account_tier = "Standard"
  account_replication_type = "GRS"
  account_kind = "Storage"

  network_rules {
    default_action = "Deny"
    virtual_network_subnet_ids = [data.azurerm_subnet.publicsubnet.id]
  }
}

# Create container
resource "azurerm_storage_container" "filestore" {
  name                  = "filestore"
  storage_account_name  = azurerm_storage_account.sa.name
  container_access_type = "private"
}

工作样品代码：

# Storage account
resource "azurerm_storage_account" "sa" {
  name                = local.storage_account_name
  resource_group_name = azurerm_resource_group.rg.name
  location            = azurerm_resource_group.rg.location

  account_kind             = var.storage_account_kind
  account_tier             = var.storage_account_tier
  account_replication_type = var.storage_account_replication_type

  enable_https_traffic_only = "true"

  tags = local.tags
}

# Create container
resource "azurerm_storage_container" "filestore" {
  name                  = "filestore"
  storage_account_name  = azurerm_storage_account.sa.name
  container_access_type = "private"
}

# SA Network rules
resource "azurerm_storage_account_network_rules" "netrules" {
  resource_group_name  = azurerm_resource_group.rg.name
  storage_account_name = azurerm_storage_account.sa.name

  default_action = "Deny"
  bypass = [
    "Metrics",
    "Logging",
    "AzureServices"
  ]

  depends_on = [
    azurerm_storage_container.filestore,
  ]
}

Reference

我在用地形创造蓝色红外线时也得到了同样的错误。
我编辑了：

container_access_type = "private"

内部：

resource "azurerm_storage_container" "container" {
     ...
     ...
     ...
    }

在main.tf文件中。

您需要在存储帐户allow_blob_public_access = true上设置此属性
azurerm的文档显示了需要设置的属性，网址为https://registry.terraform.io/providers/hashicorp/azurerm/2.82.0/docs/resources/storage_account#allow_blob_public_access
请注意，我使用的是azurerm提供程序2.82.0

resource "azurerm_storage_account" "images" {
  name                     = format("%simages", module.names.environment.storage_account.name_unique)
  resource_group_name      = azurerm_resource_group.default.name
  location                 = azurerm_resource_group.default.location
  allow_blob_public_access = true
  account_tier             = "Standard"
  account_replication_type = "LRS"
  tags                     = azurerm_resource_group.default.tags
}

resource "azurerm_storage_container" "images" {
  name                  = "images"
  storage_account_name  = azurerm_storage_account.images.name
  container_access_type = "blob"
}