Functions not working when storage account has disabled public network access except for Azure services

We have Azure Functions in consumption mode, and we would like to restrict the attached storage network access.

If we change the storage network ACLs in the bicep to:
```
networkAcls: {
defaultAction: 'Deny'
bypass: 'AzureServices'
}
```
Then the Azure Functions is not working anymore.

We do not want to create a VNET for that, just restricting the storage public network access. Do you know if we need any additional exception to set up in the network ACLs?

This is the code for the whole project with infra: https://github.com/Azure-Samples/serverless-chat-langchainjs