Azure – Protect your backup with immutable vaults (preview)

As you know, you can backup your workloads (virtual machines, SQL, file shares…), either hosted in Azure or on-premises, using Azure Backup.

Well, with the rise of ransomware attacks and other malicious activities, it becomes important to also protect your backups by blocking any operations which could lead to loss of recovery points.

To help protecting your backups, Azure Backup now allows you to protect them using immutable vault.

The immutable vault blocks the following operations:

  • For Recovery Services
    • Stop protection with delete data
    • Modify backup policy to reduce retention
    • Change backup policy to reduce retention
  • For Backup
    • Stop protection with delete data

During the preview, the immutable vault is only available in the following regions:

  • East US
  • West US
  • West US 2
  • West Central US
  • North Europe
  • Brazil South
  • Japan East

To enable immutable vault, connect to your Azure portal ( and search for either Recovery Services Vaults, Backup Vaults or the vault you want to protect


Then access the Properties tab to turn on immutable vault

image  image

When enabling immutable vault you can also make it permanent by turning on the Lock immutability for this vault option.

Be carful this option is permanent and can not be reverted

Leave a Comment

Your email address will not be published. Required fields are marked *

The reCAPTCHA verification period has expired. Please reload the page.