Certificate service renewal fails with error.

I'm trying to renew the certificate for Nexus, using the custom renew action of the certificate service. This fails with an error:

Error message: ERROR: The request may be blocked by network rules of storage account. Please check network rule set using 'az storage account
show -n accountname --query networkRuleSet'. If you want to change the default action to apply when no rule matches, please use 'az storage
account update'. ERROR: The request may be blocked by network rules of storage account. Please check network rule set using 'az storage account
show -n accountname --query networkRuleSet'. If you want to change the default action to apply when no rule matches, please use 'az storage
account update'. error running command /cnab/app /bin/bash ./scripts/letsencrypt.sh --application_gateway_name ******* --cert_name nexus-ssl
--fqdn ******* --keyvault_name ******* --resource_group_name ******* --storage_account_name *******: exit status 1 Error: error running command
/cnab/app /bin/bash ./scripts/letsencrypt.sh --application_gateway_name ******* --cert_name nexus-ssl --fqdn ******* --keyvault_name *******
--resource_group_name ******* --storage_account_name *******: exit status 1

Steps to reproduce

1. Go to the UI, find the certificate shared service, -> Actions -> renew

Azure TRE release version (e.g. v0.14.0 or main):
We're about 2 months behind the HEAD at the moment.

Deployed Azure TRE components - click the (i) in the UI:
UI Version: 0.5.27
API Version: 0.18.1

Start with the certificate service's custom renew action in the UI and the referenced scripts/letsencrypt.sh command. Investigate the Azure storage account networkRuleSet error and compare the deployed UI/API versions with the current release. Done means the renewal action completes successfully without the storage network-rules error.