Skip to content

Commit 8942b5a

Browse files
authored
Merge pull request #113880 from dcurwin/may5-softdelete
Soft delete updates
2 parents fa64f78 + cd020ef commit 8942b5a

File tree

3 files changed

+9
-7
lines changed

3 files changed

+9
-7
lines changed

articles/backup/backup-azure-security-feature-cloud.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to use security features in Azure Backup to make backups
44
ms.topic: conceptual
55
ms.date: 04/30/2020
66
---
7-
# Security features to help protect cloud workloads that use Azure Backup
7+
# Soft delete for Azure Backup
88

99
Concerns about security issues, like malware, ransomware, and intrusion, are increasing. These security issues can be costly, in terms of both money and data. To guard against such attacks, Azure Backup now provides security features to help protect backup data even after deletion.
1010

@@ -20,7 +20,7 @@ This flow chart shows the different steps and states of a backup item when Soft
2020

2121
Soft delete is enabled by default on newly created vaults to protect backup data from accidental or malicious deletes. Disabling this feature isn't recommended. The only circumstance where you should consider disabling soft delete is if you're planning on moving your protected items to a new vault, and can't wait the 14 days required before deleting and reprotecting (such as in a test environment.) Only the vault owner can disable this feature. If you disable this feature, all future deletions of protected items will result in immediate removal, without the ability to restore. Backup data that exists in soft deleted state before disabling this feature, will remain in soft deleted state for the period of 14 days. If you wish to permanently delete these immediately, then you need to undelete and delete them again to get permanently deleted.
2222

23-
It's important to remember that once soft delete is disabled, the feature is disabled for all the types of workloads, including virtual machines. For example, once the preview is enabled for a subscription it is not possible to disable soft delete only for SQL server or SAP HANA DBs while keeping it enabled for virtual machines in the same vault. You can create separate vaults for granular control.
23+
It's important to remember that once soft delete is disabled, the feature is disabled for all the types of workloads, including SQL server and SAP HANA workloads. For example, once the [SQL Server/ SAP HANA preview](https://docs.microsoft.com/azure/backup/soft-delete-sql-saphana-in-azure-vm#steps-to-enroll-in-preview) is enabled for a subscription it is not possible to disable soft delete only for SQL server or SAP HANA DBs while keeping it enabled for virtual machines in the same vault. You can create separate vaults for granular control.
2424

2525
### Disabling soft delete using Azure portal
2626

articles/backup/soft-delete-sql-saphana-in-azure-vm.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,8 @@ Azure Backup now provides soft delete for SQL server in Azure VM and SAP HANA in
1010

1111
[Soft delete](backup-azure-security-feature-cloud.md) is a security feature to help protect backup data even after deletion. With soft delete, even if a malicious actor deletes the backup of a database (or backup data is accidentally deleted), the backup data is retained for 14 additional days. This allows the recovery of that backup item with no data loss. This additional retention of 14 days of the backup data in the "soft delete" state doesn’t incur any cost to the customer.
1212

13-
Once preview is enabled for a subscription it is not possible to disable soft delete only for SQL server or SAP HANA DBs while keeping it enabled for virtual machines in the same vault. You can create separate vaults for granular control.
13+
>[!NOTE]
14+
>Once preview is enabled for a subscription it is not possible to disable soft delete only for SQL server or SAP HANA DBs while keeping it enabled for virtual machines in the same vault. You can create separate vaults for granular control.
1415
1516
## Steps to enroll in preview
1617

@@ -75,7 +76,7 @@ Once preview is enabled for a subscription it is not possible to disable soft de
7576

7677
![Undelete warning](./media/soft-delete-sql-saphana-in-azure-vm/undelete-warning.png)
7778

78-
5. At this point, you can also restore the data by selecting **Restore** for the chosen restore point.
79+
5. At this point, you can also restore the data by selecting **Restore** for the chosen soft deleted backup item.
7980

8081
![Restore VM](./media/soft-delete-sql-saphana-in-azure-vm/restore-vm.png)
8182

@@ -124,4 +125,5 @@ Disabling this feature isn't recommended. The only circumstance where you should
124125

125126
## Next steps
126127

127-
- [Overview of security features in Azure Backup](security-overview.md)
128+
- Read the [frequently asked questions](backup-azure-security-feature-cloud.md#frequently-asked-questions) about soft delete
129+
- Read about all the [security features in Azure Backup](security-overview.md)

articles/backup/toc.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -351,9 +351,9 @@
351351
items:
352352
- name: Overview
353353
href: backup-azure-security-feature-cloud.md
354-
- name: Soft delete for virtual machines
354+
- name: For virtual machines
355355
href: soft-delete-virtual-machines.md
356-
- name: Soft delete for SQL Server and SAP HANA in Azure VMs
356+
- name: For SQL Server and SAP HANA in Azure VMs
357357
href: soft-delete-sql-saphana-in-azure-vm.md
358358
- name: Security for hybrid backups
359359
href: backup-azure-security-feature.md

0 commit comments

Comments
 (0)