I needed to update the "Permitted scope for copy operations" configuration value to "From any storage account."