---
id: b0149767-c0f4-4e3c-9772-b7fd9353818d
---

# Azure Storage Account Cross-Region Replication Failures

This incident type involves failures related to cross-region replication of data in an Azure storage account. The issue arises when the replication settings are not working as expected due to various reasons such as region limitations, feature conflicts, storage account type, and access tier limitations. The incident requires troubleshooting and resolution of the underlying issue to ensure proper replication of data across different regions.

### Parameters

```shell
export RESOURCE_GROUP_NAME="PLACEHOLDER"
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export REGION_NAME="PLACEHOLDER"
export TARGET_RESOURCE_GROUP="PLACEHOLDER"
export TARGET_STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export TARGET_STORAGE_ACCOUNT_REGION="PLACEHOLDER"
```

## Debug

### List all the storage accounts in the selected subscription

```shell
az storage account list --resource-group ${RESOURCE_GROUP_NAME}
```

### Get the replication properties of a specific storage account

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --expand geoReplicationStats
```

### Check if the storage account is in a region that supports the desired replication settings

```shell
# For example, check if the storage account supports zone-redundant replication (ZRS)
az account list-locations --query "[?name == '${REGION_NAME}'].availabilityZoneMappings"
```

### Get the paired region name for the current storage account region

```shell
az account list-locations --query "[?name == '${REGION_NAME}'].metadata.pairedRegion[0].name" --output tsv
```

### Check if the storage account type supports the desired replication settings

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query 'kind'
```

### Check if the access tier supports the desired replication settings

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query 'accessTier'
```

## Repair

### Replicate the storage account to another region

```shell
#!/bin/bash

# Source storage account details
source_resource_group=${RESOURCE_GROUP_NAME}
source_storage_account=${STORAGE_ACCOUNT_NAME}
source_location=$(az storage account show --resource-group $source_resource_group --name $source_storage_account --query location -o tsv)

# Target storage account details
target_resource_group=${TARGET_RESOURCE_GROUP}
target_storage_account=${TARGET_STORAGE_ACCOUNT_NAME}
target_location=${TARGET_STORAGE_ACCOUNT_REGION}

# Fetch source storage account configurations
source_config=$(az storage account show --resource-group $source_resource_group --name $source_storage_account)

# Extract relevant properties
account_kind=$(echo $source_config | jq -r '.kind')
account_tier=$(echo $source_config | jq -r '.sku.tier')
account_access_tier=$(echo $source_config | jq -r '.accessTier')

# Create target storage account with the same configurations
az storage account create --resource-group $target_resource_group --name $target_storage_account --sku $account_tier --kind $account_kind --location $target_location --access-tier $account_access_tier

# Get the source storage connection string
connection_string=$(az storage account show-connection-string --resource-group $target_resource_group --name $target_storage_account --output tsv)

# Generate a Shared Access Signtature for the account
end=$(date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ')
sas_token=$(az storage account generate-sas --connection-string "$connection_string" --expiry $end --https-only --permissions acwudt --resource-types co --services bfqt --output tsv)

# Use azcopy to copy contents from source to target storage account
azcopy copy "https://$source_storage_account.blob.core.windows.net/$sas_token" "https://$target_storage_account.blob.core.windows.net/" --recursive


echo "Storage account replication completed."
```

This incident type involves failures related to cross-region replication of data in an Azure storage account. The issue arises when the replication settings are not working as expected due to various reasons such as region limitations, feature conflicts, storage account type, and access tier limitations. The incident requires troubleshooting and resolution of the underlying issue to ensure proper replication of data across different regions.


```shell
export RESOURCE_GROUP_NAME="PLACEHOLDER"
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export REGION_NAME="PLACEHOLDER"
export TARGET_RESOURCE_GROUP="PLACEHOLDER"
export TARGET_STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export TARGET_STORAGE_ACCOUNT_REGION="PLACEHOLDER"
```


### List all the storage accounts in the selected subscription

```shell
az storage account list --resource-group ${RESOURCE_GROUP_NAME}
```

### Get the replication properties of a specific storage account

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --expand geoReplicationStats
```

### Check if the storage account is in a region that supports the desired replication settings

```shell
# For example, check if the storage account supports zone-redundant replication (ZRS)
az account list-locations --query "[?name == '${REGION_NAME}'].availabilityZoneMappings"
```

### Get the paired region name for the current storage account region

```shell
az account list-locations --query "[?name == '${REGION_NAME}'].metadata.pairedRegion[0].name" --output tsv
```

### Check if the storage account type supports the desired replication settings

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query 'kind'
```

### Check if the access tier supports the desired replication settings

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query 'accessTier'
```


### Replicate the storage account to another region

```shell
#!/bin/bash

# Source storage account details
source_resource_group=${RESOURCE_GROUP_NAME}
source_storage_account=${STORAGE_ACCOUNT_NAME}
source_location=$(az storage account show --resource-group $source_resource_group --name $source_storage_account --query location -o tsv)

# Target storage account details
target_resource_group=${TARGET_RESOURCE_GROUP}
target_storage_account=${TARGET_STORAGE_ACCOUNT_NAME}
target_location=${TARGET_STORAGE_ACCOUNT_REGION}

# Fetch source storage account configurations
source_config=$(az storage account show --resource-group $source_resource_group --name $source_storage_account)

# Extract relevant properties
account_kind=$(echo $source_config | jq -r '.kind')
account_tier=$(echo $source_config | jq -r '.sku.tier')
account_access_tier=$(echo $source_config | jq -r '.accessTier')

# Create target storage account with the same configurations
az storage account create --resource-group $target_resource_group --name $target_storage_account --sku $account_tier --kind $account_kind --location $target_location --access-tier $account_access_tier

# Get the source storage connection string
connection_string=$(az storage account show-connection-string --resource-group $target_resource_group --name $target_storage_account --output tsv)

# Generate a Shared Access Signtature for the account
end=$(date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ')
sas_token=$(az storage account generate-sas --connection-string "$connection_string" --expiry $end --https-only --permissions acwudt --resource-types co --services bfqt --output tsv)

# Use azcopy to copy contents from source to target storage account
azcopy copy "https://$source_storage_account.blob.core.windows.net/$sas_token" "https://$target_storage_account.blob.core.windows.net/" --recursive


echo "Storage account replication completed."
```


Azure Storage Account Cross-Region Replication Failures

Overview

Parameters

Debug

List all the storage accounts in the selected subscription

Get the replication properties of a specific storage account

Check if the storage account is in a region that supports the desired replication settings

Get the paired region name for the current storage account region

Check if the storage account type supports the desired replication settings

Check if the access tier supports the desired replication settings

Repair

Replicate the storage account to another region

Learn more

Related Runbooks

Support