You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/backup/backup-azure-files-policy-automation.md
+18-18Lines changed: 18 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,13 +20,13 @@ The following table lists the various policy types that allows you to manage Azu
20
20
21
21
| Policy type | Description |
22
22
| --- | --- |
23
-
|[Policy 1](#policy-1-back-up-untagged-files-in-an-existing-vault-from-the-same-region)| Configures backup for Azure Files without a given tag to an existing Recovery Services vault in the same location. |
24
-
|[Policy 2](#policy-2-back-up-tagged-files-in-an-existing-vault-from-the-same-region)| Configures backup for Azure Files with a given tag to an existing Recovery Services vault in the same location. |
25
-
|[Policy 3](#policy-3-back-up-untagged-azure-files-in-a-new-recovery-services-vault-using-a-new-policy)| Configures backup for Azure Files without a given tag to a new Recovery Services vault with a new policy. |
26
-
|[Policy 4](#policy-4--back-up-tagged-azure-files-in-a-new-recovery-services-vault-using-a-new-policy)| Configures backup for Azure Files with a given tag to a new Recovery Services vault with a new policy. |
27
-
|[Policy 5](#policy-5-audit-azure-files-backup-configuration-with-azure-backup)| Validates if Azure Backup is enabled on Azure Files. |
23
+
|[Policy 1](#policy-1-configure-backup-for-azure-files-shares-without-a-given-tag-to-an-existing-recovery-services-vault-in-the-same-location)| Configures backup for Azure Files without a given tag to an existing Recovery Services vault in the same location. |
24
+
|[Policy 2](#policy-2-configure-backup-for-azure-files-shares-with-a-given-tag-to-an-existing-recovery-services-vault-in-the-same-location)| Configures backup for Azure Files with a given tag to an existing Recovery Services vault in the same location. |
25
+
|[Policy 3](#policy-3-configure-backup-for-azure-files-shares-without-a-given-tag-to-a-new-recovery-services-vault-with-a-new-policy)| Configures backup for Azure Files without a given tag to a new Recovery Services vault with a new policy. |
26
+
|[Policy 4](#policy-4--configure-backup-for-azure-files-shares-with-a-given-tag-to-a-new-recovery-services-vault-with-a-new-policy)| Configures backup for Azure Files with a given tag to a new Recovery Services vault with a new policy. |
27
+
|[Policy 5](#policy-5-azure-backup-should-be-enabled-on-azure-file-shares)| Validates if Azure Backup is enabled on Azure Files. |
28
28
29
-
### Policy 1: Back up Untagged Files in an existing vault from the same region
29
+
### Policy 1: Configure backup for Azure Files Shares without a given tag to an existing recovery services vault in the same location
30
30
31
31
This policy enforces backup for all Azure Files by configuring them to use an existing central Recovery Services vault in the same location and subscription as the storage account. It suits scenarios where a central team manages backups across all resources in a subscription. You can exclude Azure Files in storage accounts with a specific tag to refine the policy scope.
32
32
@@ -38,9 +38,9 @@ The evaluation workflow operates as per the following conditions:
38
38
39
39
-**Storage account isn't registered with a Recovery Services vault**: The storage account is registered with the specified Recovery Services vault, and all File Shares within the storage account is backed up automatically.
40
40
41
-
### Policy 2: Back up tagged Files in an existing vault from the same region
41
+
### Policy 2: Configure backup for Azure Files Shares with a given tag to an existing recovery services vault in the same location
42
42
43
-
This policy enforces backup for all Azure Files by directing them to a specified Recovery Services vault in the same region and subscription as the storage account. It suits organizations with a central team managing backups. You can limit the policy scope to storage accounts with specific tags by setting the required *`TagName`* and *`TagValue`*.
43
+
This policy enforces backup for all Azure Files by directing them to a specified Recovery Services vault in the same location and subscription as the storage account. It suits organizations with a central team managing backups. You can limit the policy scope to storage accounts with specific tags by setting the required *`TagName`* and *`TagValue`*.
44
44
45
45
The policy checks storage accounts based on the provided tags and applies backup settings. If it finds an unprotected file share in an eligible account, it applies the following logic and shows the results in the Azure portal:
46
46
@@ -51,29 +51,29 @@ The policy checks storage accounts based on the provided tags and applies backup
51
51
>[!Note]
52
52
>Storage accounts with the specified inclusion tags appear during evaluation and on compliance reports.
53
53
54
-
### Policy 3: Back up untagged Azure Files in a new Recovery Services vault using a new policy
54
+
### Policy 3: Configure backup for Azure Files Shares without a given tag to a new recovery services vault with a new policy
55
55
56
-
This policy enforces backup for all Azure Files by deploying a Recovery Services vault in the same region and resource group as the storage account. It suits organizations where application teams manage backups within their own resource groups. You can exclude storage accounts with specific tags (*`TagName`* and *`TagValue`*) to refine the policy scope. The policy checks each storage account based on the defined parameters, skips those storage accounts with exclusion tags, and omits them from compliance reports.
56
+
This policy enforces backup for all Azure Files by deploying a Recovery Services vault in the same location and resource group as the storage account. It suits organizations where application teams manage backups within their own resource groups. You can exclude storage accounts with specific tags (*`TagName`* and *`TagValue`*) to refine the policy scope. The policy checks each storage account based on the defined parameters, skips those storage accounts with exclusion tags, and omits them from compliance reports.
57
57
58
58
The evaluation workflow operates as per the following conditions:
59
59
60
-
-**Storage account is already registered with a Recovery Services vault**: If all File Shares are already backed up, the policy takes no action. When a File Share doesn't have backups configured and the storage account matches the Recovery Services vault specified in the policy, the backup operation is triggered through a one-time remediation task. This task runs only once; future file shares in the same account are backed up automatically.
60
+
-**Storage account is already registered with a Recovery Services vault**: If all File Shares are already backed up, the policy takes no action. If a File Share doesn't have backups configured and it's in the storage account same as the Recovery Services vault specified in the policy, the backup starts after running a one-time remediation task. This task runs only once; future file shares in the same account are backed up automatically.
61
61
62
-
-**Storage account isn't registered with any Recovery Services vault**: The policy creates a new Recovery Services vault in the same resource group and region as the storage account. It then registers the storage account with this vault, and all file shares within the account are automatically backed up.
62
+
-**Storage account isn't registered with any Recovery Services vault**: The policy creates a new Recovery Services vault in the same resource group and location as the storage account. It then registers the storage account with this vault, and all file shares within the account are automatically backed up.
63
63
64
-
### Policy 4- Back up tagged Azure Files in a new Recovery Services vault using a new policy
64
+
### Policy 4- Configure backup for Azure Files Shares with a given tag to a new recovery services vault with a new policy
65
65
66
-
This policy enforces backup for all Azure Files by creating a Recovery Services vault in the same region and resource group as the storage account. It suits organizations where application teams manage their own backup and restore operations within dedicated resource groups. You can limit the policy scope to storage accounts with specific tags (*`TagName`* and *`TagValue`*) for precise control.
66
+
This policy enforces backup for all Azure Files by creating a Recovery Services vault in the same location and resource group as the storage account. It suits organizations where application teams manage their own backup and restore operations within dedicated resource groups. You can limit the policy scope to storage accounts with specific tags (*`TagName`* and *`TagValue`*) for precise control.
67
67
68
68
The policy checks each storage account based on the defined parameters. It includes accounts that match the specified tags and reflects their compliance status in the Azure portal.
69
69
70
70
The evaluation workflow operates as per the following conditions:
71
71
72
-
-**Storage account is already registered with a Recovery Services vault**: If all file shares are already backed up, the policy takes no action. If any file share doesn't have backup configured, and the storage account matches the Recovery Services vault specified in the policy, the backup starts after running a one-time remediation task. After this task completes, future File Shares in the same account are backed up automatically.
72
+
-**Storage account is already registered with a Recovery Services vault**: If all file shares are already backed up, the policy takes no action. If any file share doesn't have backup configured, and it's in the storage account same as the Recovery Services vault specified in the policy, the backup starts after running a one-time remediation task. After this task completes, future File Shares in the same account are backed up automatically.
73
73
74
-
-**Storage account isn't registered with any Recovery Services vault**: The policy creates a new Recovery Services vault in the same region and resource group as the storage account, registers the storage account with this vault, and automatically backs up all File Shares within it.
74
+
-**Storage account isn't registered with any Recovery Services vault**: The policy creates a new Recovery Services vault in the same location and resource group as the storage account, registers the storage account with this vault, and automatically backs up all File Shares within it.
### Policy 5: Azure Backup should be enabled on Azure file shares
77
77
78
78
This policy validates if the protection of your Azure Files is configured with Azure Backup—a secure and cost-effective solution for safeguarding Azure workloads. It generates a report that lists both compliant and noncompliant resources.
79
79
@@ -83,7 +83,7 @@ The following table lists the supported and unsupported scenarios for the availa
83
83
84
84
| Policy types | Supported | Unsupported |
85
85
| --- | --- | --- |
86
-
|**Policies 1 and 2**| Can be assigned to a single region and subscription at a time. To enable backup for Files across regions and subscriptions, multiple instances of the policy assignment need to be created, one for each combination of region and subscription. <br><br> - The specified vault and the Azure Files configured for backup can be under different resource groups. | Management group scope is currently unsupported. |
86
+
|**Policies 1 and 2**| Can be assigned to a single location and subscription at a time. To enable backup for Files across locations and subscriptions, multiple instances of the policy assignment need to be created, one for each combination of location and subscription. <br><br> - The specified vault and the Azure Files configured for backup can be under different resource groups. | Management group scope is currently unsupported. |
87
87
|**Policies 3 and 4**| Can be assigned to a single subscription at a time (or a resource group within a subscription). ||
0 commit comments