Skip to content

Commit e955568

Browse files
authored
Merge pull request #108604 from MGoedtel/task1699872
Update Data Retention Limit for Automation Resources
2 parents f1cd01b + 4f82f30 commit e955568

File tree

1 file changed

+24
-18
lines changed

1 file changed

+24
-18
lines changed

articles/automation/automation-managing-data.md

Lines changed: 24 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -3,57 +3,65 @@ title: Managing Azure Automation data
33
description: This article contains multiple topics for managing an Azure Automation environment. Currently includes Data Retention and Backing up Azure Automation Disaster Recovery in Azure Automation.
44
services: automation
55
ms.subservice: shared-capabilities
6-
ms.date: 03/16/2018
6+
ms.date: 03/23/2020
77
ms.topic: conceptual
88
---
99
# Managing Azure Automation data
10+
1011
This article contains multiple topics for managing an Azure Automation environment.
1112

1213
## Data retention
13-
When you delete a resource in Azure Automation, it is retained for 90 days for auditing purposes before being removed permanently. You can’t see or use the resource during this time. This policy also applies to resources that belong to an automation account that is deleted.
1414

15-
Azure Automation automatically deletes and permanently removes jobs older than 90 days.
15+
When you delete a resource in Azure Automation, it is retained for 30 days for auditing purposes before being removed permanently. You can't see or use the resource during this time. This policy also applies to resources that belong to an automation account that is deleted.
16+
17+
Azure Automation automatically deletes and permanently removes jobs older than 30 days.
1618

1719
The following table summarizes the retention policy for different resources.
1820

1921
| Data | Policy |
2022
|:--- |:--- |
21-
| Accounts |Permanently removed 90 days after the account is deleted by a user. |
22-
| Assets |Permanently removed 90 days after the asset is deleted by a user, or 90 days after the account that holds the asset is deleted by a user. |
23-
| Modules |Permanently removed 90 days after the module is deleted by a user, or 90 days after the account that holds the module is deleted by a user. |
24-
| Runbooks |Permanently removed 90 days after the resource is deleted by a user, or 90 days after the account that holds the resource is deleted by a user. |
25-
| Jobs |Deleted and permanently removed 90 days after last being modified. This could be after the job completes, is stopped, or is suspended. |
26-
| Node Configurations/MOF Files |Old node configuration is permanently removed 90 days after a new node configuration is generated. |
27-
| DSC Nodes |Permanently removed 90 days after the node is unregistered from Automation Account using Azure portal or the [Unregister-AzureRMAutomationDscNode](https://docs.microsoft.com/powershell/module/azurerm.automation/unregister-azurermautomationdscnode) cmdlet in Windows PowerShell. Nodes are also permanently removed 90 days after the account that holds the node is deleted by a user. |
23+
| Accounts |Permanently removed 30 days after the account is deleted by a user. |
24+
| Assets |Permanently removed 30 days after the asset is deleted by a user, or 30 days after the account that holds the asset is deleted by a user. |
25+
| Modules |Permanently removed 30 days after the module is deleted by a user, or 30 days after the account that holds the module is deleted by a user. |
26+
| Runbooks |Permanently removed 30 days after the resource is deleted by a user, or 30 days after the account that holds the resource is deleted by a user. |
27+
| Jobs |Deleted and permanently removed 30 days after last being modified. This could be after the job completes, is stopped, or is suspended. |
28+
| Node Configurations/MOF Files |Old node configuration is permanently removed 30 days after a new node configuration is generated. |
29+
| DSC Nodes |Permanently removed 30 days after the node is unregistered from Automation Account using Azure portal or the [Unregister-AzureRMAutomationDscNode](https://docs.microsoft.com/powershell/module/azurerm.automation/unregister-azurermautomationdscnode) cmdlet in Windows PowerShell. Nodes are also permanently removed 30 days after the account that holds the node is deleted by a user. |
2830
| Node Reports |Permanently removed 90 days after a new report is generated for that node |
2931

3032
The retention policy applies to all users and currently cannot be customized.
3133

32-
However, if you need to retain data for a longer period of time, you can forward runbook job logs to Azure Monitor logs. For further information, review [forward Azure Automation job data to Azure Monitor logs](automation-manage-send-joblogs-log-analytics.md).
34+
However, if you need to retain data for a longer period of time, you can forward runbook job logs to Azure Monitor logs. For further information, review [forward Azure Automation job data to Azure Monitor logs](automation-manage-send-joblogs-log-analytics.md).
3335

3436
## Backing up Azure Automation
35-
When you delete an automation account in Microsoft Azure, all objects in the account are deleted including runbooks, modules, configurations, settings, jobs, and assets. The objects cannot be recovered after the account is deleted. You can use the following information to backup the contents of your automation account before deleting it.
37+
38+
When you delete an automation account in Microsoft Azure, all objects in the account are deleted including runbooks, modules, configurations, settings, jobs, and assets. The objects cannot be recovered after the account is deleted. You can use the following information to backup the contents of your automation account before deleting it.
3639

3740
### Runbooks
38-
You can export your runbooks to script files using either the Azure portal or the [Get-AzureAutomationRunbookDefinition](https://docs.microsoft.com/powershell/module/servicemanagement/azure/get-azureautomationrunbookdefinition) cmdlet in Windows PowerShell. These script files can be imported into another automation account as discussed in [Creating or Importing a Runbook](/previous-versions/azure/dn643637(v=azure.100)).
41+
42+
You can export your runbooks to script files using either the Azure portal or the [Get-AzureAutomationRunbookDefinition](https://docs.microsoft.com/powershell/module/servicemanagement/azure/get-azureautomationrunbookdefinition) cmdlet in Windows PowerShell. These script files can be imported into another automation account as discussed in [Creating or Importing a Runbook](/previous-versions/azure/dn643637(v=azure.100)).
3943

4044
### Integration modules
41-
You cannot export integration modules from Azure Automation. You must ensure that they are available outside of the automation account.
45+
46+
You cannot export integration modules from Azure Automation. You must ensure that they are available outside of the automation account.
4247

4348
### Assets
49+
4450
You cannot export [assets](/previous-versions/azure/dn939988(v=azure.100)) from Azure Automation. Using the Azure portal, you must note the details of variables, credentials, certificates, connections, and schedules. You must then manually create any assets that are used by runbooks that you import into another automation.
4551

4652
You can use [Azure cmdlets](https://docs.microsoft.com/powershell/module/azurerm.automation#automation) to retrieve details of unencrypted assets and either save them for future reference or create equivalent assets in another automation account.
4753

48-
You cannot retrieve the value for encrypted variables or the password field of credentials using cmdlets. If you don't know these values, then you can retrieve them from a runbook using the [Get-AutomationVariable](/previous-versions/azure/dn940012(v=azure.100)) and [Get-AutomationPSCredential](/previous-versions/azure/dn940015(v=azure.100)) activities.
54+
You cannot retrieve the value for encrypted variables or the password field of credentials using cmdlets. If you don't know these values, then you can retrieve them from a runbook using the [Get-AutomationVariable](/previous-versions/azure/dn940012(v=azure.100)) and [Get-AutomationPSCredential](/previous-versions/azure/dn940015(v=azure.100)) activities.
4955

50-
You cannot export certificates from Azure Automation. You must ensure that any certificates are available outside of Azure.
56+
You cannot export certificates from Azure Automation. You must ensure that any certificates are available outside of Azure.
5157

5258
### DSC configurations
59+
5360
You can export your configurations to script files using either the Azure portal or the
5461
[Export-AzureRmAutomationDscConfiguration](https://docs.microsoft.com/powershell/module/azurerm.automation/export-azurermautomationdscconfiguration) cmdlet in Windows PowerShell. These configurations can be imported and used in another automation account.
5562

5663
## Geo-replication in Azure Automation
64+
5765
Geo-replication, standard in Azure Automation accounts, backs up account data to a different geographical region for redundancy. You can choose a primary region when setting up your account, and then a secondary region is assigned to it automatically. The secondary data, copied from the primary region, is continuously updated in case of data loss.
5866

5967
The following table shows the available primary and secondary region pairings.
@@ -67,5 +75,3 @@ The following table shows the available primary and secondary region pairings.
6775
| Japan East |Japan West |
6876

6977
In the unlikely event that a primary region data is lost, Microsoft attempts to recover it. If the primary data cannot be recovered, then geo-failover is performed and the affected customers will be notified about this through their subscription.
70-
71-

0 commit comments

Comments
 (0)