Service configuration settings can usually be exported to Azure Resource Manager templates.Īzure implementation and additional context:.If you use Azure Storage for data storage, enable blob versioning for your storage blobs which will allow you to preserve, retrieve, and restore every version of every object stored in your Azure Storage.For example, Azure Key Vault provides a native backup capability.įor resources/services that are neither supported by Azure Backup nor have a native backup capability, evaluate your backup and disaster needs, and create your own mechanism as per your business requirements. For Azure VM, you can use Azure Policy to have backup automatically enabled using Azure Policy.įor resources or services not supported by Azure Backup, use the native backup capability provided by the resource or service. Security principle: Ensure backup of business-critical resources, either during resource creation or enforced through policy for existing resources.Īzure guidance: For Azure Backup supported resources (such as Azure VMs, SQL Server, HANA databases, Azure PostgreSQL Database, File Shares, Blobs or Disks), enable Azure Backup and configure the desired frequency and retention period. BR-1: Ensure regular automated backups CIS Controls v8 ID(s) Backup and Recovery covers controls to ensure that data and configuration backups at the different service tiers are performed, validated, and protected.
0 kommentar(er)
