The only circumstance where you should consider disabling soft delete is if you're planning on moving your protected items to a new vault, and can't wait the 14 days required before deleting and reprotecting (such as in a test environment).
Disabling this feature isn't recommended. Soft delete is enabled by default on newly created vaults to protect backup data from accidental or malicious deletes. This flow chart shows the different steps and states of a backup item when Soft Delete is enabled:
Soft delete for SQL server in Azure VM and soft delete for SAP HANA in Azure VM workloads. Soft delete protection is available for these services: The additional 14 days of retention for backup data in the "soft delete" state don't incur any cost to you. With soft delete, even if a malicious actor deletes a backup (or backup data is accidentally deleted), the backup data is retained for 14 additional days, allowing the recovery of that backup item with no data loss. To guard against such attacks, Azure Backup now provides security features to help protect backup data even after deletion. These security issues can be costly, in terms of both money and data. 
Concerns about security issues, like malware, ransomware, and intrusion, are increasing.
0 kommentar(er)
