---
id: e7ac82fa-a0a9-427f-8da0-b9472e747aaf
---

# Azure Storage Account Data Deletion or Corruption

This incident type involves the accidental deletion or corruption of data in an Azure storage account. It can result in the permanent loss of critical data. The recommended resolution is to set up soft delete or versioning to protect against accidental data loss and regularly back up critical data.

### Parameters

```shell
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export RESOURCE_GROUP_NAME="PLACEHOLDER"
export CONTAINER_NAME="PLACEHOLDER"
export CONNECTION_STRING="PLACEHOLDER"
export BLOB_NAME="PLACEHOLDER"
export VAULT_NAME="PLACEHOLDER"
```

## Debug

### Check if the storage account is still available

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### List the blobs in a container to check if they're still accessible

```shell
az storage blob list --container-name ${CONTAINER_NAME} --connection-string '${CONNECTION_STRING}'
```

### Check if versioning is enabled for the storage account

```shell
az storage account blob-service-properties show --account-name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query "isVersioningEnabled"
```

### Check if soft delete is enabled for the storage account

```shell
az storage account blob-service-properties show --account-name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query "deleteRetentionPolicy.enabled"
```

### List the versions of a blob to check if they're still accessible

```shell
az storage blob list --connection-string '${CONNECTION_STRING}' --container-name ${CONTAINER_NAME} --include v -o json --query "reverse(sort_by([?name=='${BLOB_NAME}'], &versionId))[0].versionId"
```

### Check the logs for any suspicious activity that may have caused the data deletion or corruption

```shell
az monitor activity-log list
```

### Check the backup status to ensure that critical data is regularly backed up

```shell
az backup job list --resource-group ${RESOURCE_GROUP_NAME} --vault-name ${VAULT_NAME} --output table
```

## Repair

### Set up soft delete or versioning in the Azure storage account to protect against accidental data loss. This will allow deleted or overwritten files to be recovered within a certain time frame.

```shell
#!/bin/bash

# Set variables
resource_group=${RESOURCE_GROUP_NAME}
storage_account=${STORAGE_ACCOUNT_NAME}

# Enable soft delete on the storage account
az storage account blob-service-properties update \
  --resource-group $resource_group \
  --account-name $storage_account \
  --enable-delete-retention true \
  --delete-retention-days 30

# Enable versioning on the storage account
az storage account blob-service-properties update \
  --resource-group $resource_group \
  --account-name $storage_account \
  --enable-versioning true
```

This incident type involves the accidental deletion or corruption of data in an Azure storage account. It can result in the permanent loss of critical data. The recommended resolution is to set up soft delete or versioning to protect against accidental data loss and regularly back up critical data.


```shell
export STORAGE_ACCOUNT_NAME="PLACEHOLDER"
export RESOURCE_GROUP_NAME="PLACEHOLDER"
export CONTAINER_NAME="PLACEHOLDER"
export CONNECTION_STRING="PLACEHOLDER"
export BLOB_NAME="PLACEHOLDER"
export VAULT_NAME="PLACEHOLDER"
```


### Check if the storage account is still available

```shell
az storage account show --name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME}
```

### List the blobs in a container to check if they're still accessible

```shell
az storage blob list --container-name ${CONTAINER_NAME} --connection-string '${CONNECTION_STRING}'
```

### Check if versioning is enabled for the storage account

```shell
az storage account blob-service-properties show --account-name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query "isVersioningEnabled"
```

### Check if soft delete is enabled for the storage account

```shell
az storage account blob-service-properties show --account-name ${STORAGE_ACCOUNT_NAME} --resource-group ${RESOURCE_GROUP_NAME} --query "deleteRetentionPolicy.enabled"
```

### List the versions of a blob to check if they're still accessible

```shell
az storage blob list --connection-string '${CONNECTION_STRING}' --container-name ${CONTAINER_NAME} --include v -o json --query "reverse(sort_by([?name=='${BLOB_NAME}'], &versionId))[0].versionId"
```

### Check the logs for any suspicious activity that may have caused the data deletion or corruption

```shell
az monitor activity-log list
```

### Check the backup status to ensure that critical data is regularly backed up

```shell
az backup job list --resource-group ${RESOURCE_GROUP_NAME} --vault-name ${VAULT_NAME} --output table
```


### Set up soft delete or versioning in the Azure storage account to protect against accidental data loss. This will allow deleted or overwritten files to be recovered within a certain time frame.

```shell
#!/bin/bash

# Set variables
resource_group=${RESOURCE_GROUP_NAME}
storage_account=${STORAGE_ACCOUNT_NAME}

# Enable soft delete on the storage account
az storage account blob-service-properties update \
  --resource-group $resource_group \
  --account-name $storage_account \
  --enable-delete-retention true \
  --delete-retention-days 30

# Enable versioning on the storage account
az storage account blob-service-properties update \
  --resource-group $resource_group \
  --account-name $storage_account \
  --enable-versioning true
```


Azure Storage Account Data Deletion or Corruption

Overview

Parameters

Debug

Check if the storage account is still available

List the blobs in a container to check if they're still accessible

Check if versioning is enabled for the storage account

Check if soft delete is enabled for the storage account

List the versions of a blob to check if they're still accessible

Check the logs for any suspicious activity that may have caused the data deletion or corruption

Check the backup status to ensure that critical data is regularly backed up

Repair

Set up soft delete or versioning in the Azure storage account to protect against accidental data loss. This will allow deleted or overwritten files to be recovered within a certain time frame.

Learn more

Related Runbooks

Support