question

GermanC-9715 avatar image
0 Votes"
GermanC-9715 asked SumanthMarigowda-MSFT commented

Blob Storage Immutability - Termination

Hello,

Let's assume I configure time based retention immutability policy for a blob container, for 1 year. Now I need to decommission the whole subscription. Would I have to wait until all blobs are over 1 year to delete them? Is there any way to override the policy even if it is locked?

Thanks

azure-blob-storage
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

SumanthMarigowda-MSFT avatar image
0 Votes"
SumanthMarigowda-MSFT answered SumanthMarigowda-MSFT commented

@GermanC-9715 Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Only unlocked time-based retention policies can be removed from a container. Once a time-based retention policy is locked, it cannot be removed; only effective retention period extensions are allowed. Legal hold tags can be deleted. When all legal tags are deleted, the legal hold is removed.

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage#how-it-works ? Basically calling out explicitly that immutability does not protect against subscription deletion ?**

- What happen with the data when you delete the subscription ?
- What happens with the cost when you delete the subscription ?

It’s deleted subject to retention policy, called out here https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/subscription-disabled

What happens if I try to delete a storage account with a container that has a time-based retention policy or legal hold?

The storage account deletion will fail if there is at least one container with a legal hold set or a locked time-based policy. A container with an unlocked time-based policy does not protect against storage account deletion. You must remove all legal holds and delete all locked containers before you can delete the storage account. For information on container deletion, see the preceding question. You can also apply further delete protections for your storage account with Azure Resource Manager locks.

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.


Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for this information. However, looking at the links you posted I don't see any mention to what happens when a Subscription with immutable blobs get deleted.

I assume we will get charged until the last blob immutability expires?

Thanks

0 Votes 0 ·

@GermanC-9715 In the case of non-payment, normal data retention policies will apply as stipulated in the terms and conditions of your contract with Microsoft. For general information, see Data management at Microsoft. This article give complete detailed information on Data management at Microsoft: https://www.microsoft.com/en-in/trust-center/privacy/data-management

If you still have any question related to pricing I would recommended to contact, Azure Billing Subscription team, it's a Free support and they could provide you the detailed information on your scenario

Immutable is immutable. The detail is:
If locked policy set with blobs under protection, blob, container, and account cannot be deleted. Only way around this is to delete the subscription.
If unlocked policy, can remove the policy.
If locked policy but no blobs under protection, can first delete all blobs, then delete the container

II would recommend move the storage account to a different subscription and let that subscription suspend

Hope this helps!
Kindly let us know if the above helps or you need further assistance on this issue.


Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

0 Votes 0 ·