|
| 1 | +--- |
| 2 | +title: Snapshots in Azure App Configuration (preview) |
| 3 | +description: Details of Snapshots in Azure App Configuration |
| 4 | +author: Muksvso |
| 5 | +ms.author: mubatra |
| 6 | +ms.service: azure-app-configuration |
| 7 | +ms.topic: conceptual |
| 8 | +ms.date: 05/16/2023 |
| 9 | +--- |
| 10 | + |
| 11 | +# Snapshots (preview) |
| 12 | + |
| 13 | +A snapshot is a named, immutable subset of an App Configuration store's key-values. The key-values that make up a snapshot are chosen during creation time through the usage of key and label filters. Once a snapshot is created, the key-values within are guaranteed to remain unchanged. |
| 14 | + |
| 15 | +## Deploy safely with snapshots |
| 16 | + |
| 17 | +Snapshots are designed to safely deploy configuration changes. Deploying faulty configuration changes into a running environment can cause issues such as service disruption and data loss. In order to avoid such issues, it's important to be able to vet configuration changes before moving into production environments. If such an issue does occur, it's important to be able to roll back any faulty configuration changes in order to restore service. Snapshots are created for managing these scenarios. |
| 18 | + |
| 19 | +Configuration changes should be deployed in a controlled, consistent way. Developers can use snapshots to perform controlled rollout. The only change needed in an application to begin a controlled rollout is to update the name of the snapshot the application is referencing. As the application moves into production, there's a guarantee that the configuration in the referenced snapshot remains unchanged. This guarantee against any change in a snapshot protects against unexpected settings making their way into production. The immutability and ease-of-reference of snapshots make it simple to ensure that the right set of configuration changes are rolled out safely. |
| 20 | + |
| 21 | +## Scenarios for using snapshots |
| 22 | + |
| 23 | +* **Controlled rollout**: Snapshots are well suited for supporting controlled rollout due to their immutable nature. When developers utilize snapshots for configuration, they can be confident that the configuration remains unchanged as the release progresses through different phases of the rollout. |
| 24 | + |
| 25 | +* **Last Known Good (LKG) configuration**: Snapshots can be used to support safe deployment practices for Configuration. With snapshots, developers can ensure that a Last known Good (LKG) configuration is available for rollback if there was any issue during deployment. |
| 26 | + |
| 27 | +* **Configuration versioning**: Snapshots can be used to create a version history of configuration settings to sync with release versions. Settings captured in each snapshot can be compared to identify changes between versions. |
| 28 | + |
| 29 | +* **Auditing**: Snapshots can be used for auditing and compliance purposes. Developers can maintain a record of configuration changes in between releases by using the snapshots for the releases. |
| 30 | + |
| 31 | +* **Testing and Staging environments**: Snapshots can be used to create consistent testing and staging environments. Developers can ensure that the same configuration is used across different environments, by using the same snapshot, which can help with debugging and testing. |
| 32 | + |
| 33 | +* **Simplified Client Configuration composition**: Usually, the clients of App Configuration need a subset of the key-values from the App Configuration instance. To get the set of required key-values, they need to have query logic written in code. As Snapshots support providing filters during creation time, it helps simplify client composition because clients can now refer to the set of key-values they require by name. |
| 34 | + |
| 35 | +## Snapshot operations |
| 36 | + |
| 37 | +As snapshots are immutable entities, snapshots can only be created and archived. No deleting, purging or editing is possible. |
| 38 | + |
| 39 | +* **Create snapshot**: Snapshots can be created by defining the key and label filters to capture the required key-values from App Configuration instance. The filtered key-values are stored as a snapshot with the name provided during creation. |
| 40 | + |
| 41 | +* **Archive snapshot**: Archiving a snapshot puts it in an archived state. While a snapshot is archived, it's still fully functional. When the snapshot is archived, an expiration time is set based on the retention period configured during the snapshot's creation. If the snapshot remains in the archived state up until the expiration time, then it automatically disappears from the system when the expiration time passes. Archival is used for phasing out snapshots that are no longer in use. |
| 42 | + |
| 43 | +* **Recover snapshot**: Recovering a snapshot puts it back in an active state. At this point, the snapshot is no longer subject to expiration based on its configured retention period. Recovery is only possible in the retention period after archival. |
| 44 | + |
| 45 | +> [!NOTE] |
| 46 | +> The retention period can only be set during the creation of a snapshot. The default value for retention period is 30 days for Standard stores and 7 days for Free stores. |
| 47 | +
|
| 48 | +## Requirements for snapshot operations |
| 49 | + |
| 50 | +The following sections detail the permissions required to perform snapshot related operations with Azure AD and HMAC authentication. |
| 51 | + |
| 52 | +### Create a snapshot |
| 53 | + |
| 54 | +To create a snapshot in stores using Azure Active Directory (Azure AD) authentication, the following permissions are required. The App Configuration Data Owner role already has these permissions. |
| 55 | +- `Microsoft.AppConfiguration/configurationStores/keyvalues/read` |
| 56 | +- `Microsoft.AppConfiguration/configurationStores/snapshots/write` |
| 57 | + |
| 58 | +To archive and/or recover a snapshot using HMAC authentication, a read-write access key must be used. |
| 59 | + |
| 60 | +### Archive and recover a snapshot |
| 61 | + |
| 62 | +To archive and/or recover a snapshot using Azure AD authentication, the following permission is needed. The App Configuration Data Owner role already has this permission. |
| 63 | +- `Microsoft.AppConfiguration/configurationStores/snapshots/archive/action` |
| 64 | + |
| 65 | +To archive and/or recover a snapshot using HMAC authentication, a read-write access key must be used. |
| 66 | + |
| 67 | +### Read and list snapshots |
| 68 | + |
| 69 | +To list all snapshots, or get all the key-values in an individual snapshot by name the following permission is needed for stores utilizing Azure AD authentication. The built-in Data Owner and Data Reader roles already have this permission. |
| 70 | +- `Microsoft.AppConfiguration/configurationStores/snapshots/read` |
| 71 | + |
| 72 | +For stores that use HMAC authentication, both the "read snapshot" operation (to read the key-values from a snapshot) and the "list snapshots" operation can be performed using either the read-write access keys or the read-only access keys. |
| 73 | + |
| 74 | +## Billing considerations and limits |
| 75 | + |
| 76 | +The storage quota for snapshots is detailed in the "storage per resource section" of the [App Configuration pricing page](https://azure.microsoft.com/pricing/details/app-configuration/) There's no extra charge for snapshots before the included snapshot storage quota is exhausted. |
| 77 | + |
| 78 | +App Configuration has two tiers, Free and Standard. Check the following details for snapshot quotas in each tier. |
| 79 | + |
| 80 | +* **Free tier**: This tier has a snapshot storage quota of 10 MB. One can create as many snapshots as possible as long as the total storage size of all active and archived snapshots is less than 10 MB. |
| 81 | + |
| 82 | +* **Standard tier**: This tier has a snapshot storage quota of 1 GB. One can create as many snapshots as possible as long as the total storage size of all active and archived snapshots is less than 1 GB. |
| 83 | + |
| 84 | +The maximum size for a snapshot is 1 MB. |
| 85 | + |
| 86 | +## Next steps |
| 87 | + |
| 88 | +> [!div class="nextstepaction"] |
| 89 | +> [Create a snapshot](./howto-create-snapshots.md) |
0 commit comments