As you know, you can backup your workloads (virtual machines, SQL, file shares…), either hosted in Azure or on-premises, using Azure Backup.
Well, with the rise of ransomware attacks and other malicious activities, it becomes important to also protect your backups by blocking any operations which could lead to loss of recovery points.
To help protecting your backups, Azure Backup now allows you to protect them using immutable vault.
The immutable vault blocks the following operations:
- For Recovery Services
- Stop protection with delete data
- Modify backup policy to reduce retention
- Change backup policy to reduce retention
- For Backup
- Stop protection with delete data
During the preview, the immutable vault is only available in the following regions:
- East US
- West US
- West US 2
- West Central US
- North Europe
- Brazil South
- Japan East
To enable immutable vault, connect to your Azure portal (https://portal.azure.com/) and search for either Recovery Services Vaults, Backup Vaults or the vault you want to protect
Then access the Properties tab to turn on immutable vault
When enabling immutable vault you can also make it permanent by turning on the Lock immutability for this vault option.
Be carful this option is permanent and can not be reverted