Hi Aaron,
You are right in your error mitigation steps.
Make sure of the following:
Assign the correct role to the blob storage, and ensure the blob resource is properly configured. Here is the relevant documentation:
https://free.blessedness.top/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal#determine-resource-scope
Since you've already enabled CORS, check it again.
You can also check for failures by going to:
Storage account → Monitoring → Insights
The error you're facing is likely due to managed identity permissions. Make sure to check the roles using the Azure Portal, as shown below.
Feel free to accept this as an answer.
Thankyou for reaching out to The Microsoft QNA Portal.