Troubleshooting Azure Application Gateway Ingress Controller 403 Error

🛠 Fixing ErrorApplicationGatewayForbidden in AKS + Application Gateway When running: Azure Kubernetes Service Azure Application Gateway Azure Application Gateway Ingress Controller You may encounter this error inside AGIC logs: ErrorApplicationGatewayForbidden StatusCode=403 Microsoft.Network/applicationGateways/read This tutorial explains: ✅ Why this happens 🔍 How to diagnose it 🛠 How to fix it properly 🔐 How to prevent it next time 📌 The Error From AGIC logs: kubectl logs -n kube-system deploy/ingress-appgw-deployment You’ll see something like: Unexpected status code '403' while performing a GET on Application Gateway AuthorizationFailed And: The client '<object-id>' does not have authorization to perform action 'Microsoft.Network/applicationGateways/read' 🧠 Root Cause AGIC runs using a managed identity . That identity must have Azure RBAC permissions to: Read Application Gateway Modify listeners Modify backend pools Modify routing rules If those permissions are missing → AGIC cannot