Hi
We are currently working on a custom policy solution, where we want to automate backup for VM's with specific tags.
As I understand, due to zero-trust there are restrictions when handling VM backups and RSV's:
RSV and VM must be in same subscription
RSV and VM must be in same region
This is fine, but my question is regarding the approach.
I would like to centralise the vaults for each region in one resource group.
The issue is that the resource group itself doesn't have a "global" location... it has to be placed in a specific region.
From my understanding, if you have a resource in region X but place the resource in a resource group which is region Y, then if region Y fails, the resource will continue to function, but you will be unable to update the resource (add/ remove/ modify) until region Y comes back online.
I assume the same applies to backup vaults. But my question is what is considered a modification for a backup vault?
A scenario:
We have a resource group:
Resource Group: rg-backuptest-weu-001 (location: WestEurope)
In this resource group, 2 resources:
Resource: rsv-vmbak-weu-001 (location: WestEurope)
Resource: rsv-vmbak-eus-001 (location: EastUS)
If West Europe goes down (unavailable due to outage). My question:
- Does resource 'rsv-vmbak-eus-001' continue to backup VM's for the East US region during the outage of West Europe?
- Can you restore backups from 'rsv-vmbak-eus-001' to the VM's for the East US region during the outage of West Europe?
- What limitations affect the resource 'rsv-vmbak-eus-001' in the East US region during the outage of West Europe?
Thank you for your replies.