{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/", "slug": "dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions", "url": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/" }, "title": "Restore a blob's current content separately from undeleting its versions", "summary": "Undelete restores retained soft-deleted versions together; it does not make one of them the current blob.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:27:03+00:00", "modified_at": "2026-09-10T01:23:49+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 236, "potentially_affected": "Supported Azure Blob Storage accounts with blob versioning and blob soft delete enabled.", "dse_recommendation": "Separate recovery of retained versions from the approved choice of content to promote as current.", "primary_source": { "name": "Blob Versioning in Azure Storage - Azure Storage | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/storage/blobs/versioning-overview", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

With versioning enabled, deleting a blob without a version ID turns its current version into a previous version and leaves no current version. Existing previous versions remain. Deleting a specific previous version while soft delete is enabled instead retains that deleted version for the configured retention period.

\n

Undelete Blob restores all retained soft-deleted versions, not a selected single version, and promotes none of them to current. Microsoft describes restoring those versions first and then copying the chosen previous version to a new current version. Microsoft Learn.

\n

Applicability

\n

Identify the account’s supported configuration, exact blob and relevant version IDs. Confirm that the required version is still recoverable before planning restoration.

\n

DSE recommendation

\n

DSE recommends recording which content the application should receive and who approves that choice. Keep restoration of historical versions separate from any operation that changes current content. Review existing application writes before promoting a version so the recovery decision accounts for concurrent activity. Do not interpret a successful undelete response as proof that the intended application data is now current.

\n

Verification

\n

In an approved recovery test, inspect the recovered version list, identify the selected source and read the current blob after the separate promotion. Compare its content with the approved recovery point. Record any version that could not be recovered and any current-content discrepancy before returning the application to normal use.

\n

Official references

\n

Microsoft Learn: Blob Versioning in Azure Storage. Source retrieved September 9, 2026.

", "content_text": "Source facts\nWith versioning enabled, deleting a blob without a version ID turns its current version into a previous version and leaves no current version. Existing previous versions remain. Deleting a specific previous version while soft delete is enabled instead retains that deleted version for the configured retention period.\nUndelete Blob restores all retained soft-deleted versions, not a selected single version, and promotes none of them to current. Microsoft describes restoring those versions first and then copying the chosen previous version to a new current version. Microsoft Learn.\nApplicability\nIdentify the account’s supported configuration, exact blob and relevant version IDs. Confirm that the required version is still recoverable before planning restoration.\nDSE recommendation\nDSE recommends recording which content the application should receive and who approves that choice. Keep restoration of historical versions separate from any operation that changes current content. Review existing application writes before promoting a version so the recovery decision accounts for concurrent activity. Do not interpret a successful undelete response as proof that the intended application data is now current.\nVerification\nIn an approved recovery test, inspect the recovered version list, identify the selected source and read the current blob after the separate promotion. Compare its content with the approved recovery point. Record any version that could not be recovered and any current-content discrepancy before returning the application to normal use.\nOfficial references\nMicrosoft Learn: Blob Versioning in Azure Storage. Source retrieved September 9, 2026.", "content_markdown": "## Source facts\n\nWith versioning enabled, deleting a blob without a version ID turns its current version into a previous version and leaves no current version. Existing previous versions remain. Deleting a specific previous version while soft delete is enabled instead retains that deleted version for the configured retention period.\n\nUndelete Blob restores all retained soft-deleted versions, not a selected single version, and promotes none of them to current. Microsoft describes restoring those versions first and then copying the chosen previous version to a new current version. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/blobs/versioning-overview).\n\n## Applicability\n\nIdentify the account’s supported configuration, exact blob and relevant version IDs. Confirm that the required version is still recoverable before planning restoration.\n\n## DSE recommendation\n\nDSE recommends recording which content the application should receive and who approves that choice. Keep restoration of historical versions separate from any operation that changes current content. Review existing application writes before promoting a version so the recovery decision accounts for concurrent activity. Do not interpret a successful undelete response as proof that the intended application data is now current.\n\n## Verification\n\nIn an approved recovery test, inspect the recovered version list, identify the selected source and read the current blob after the separate promotion. Compare its content with the approved recovery point. Record any version that could not be recovered and any current-content discrepancy before returning the application to normal use.\n\n## Official references\n\n[Microsoft Learn: Blob Versioning in Azure Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/versioning-overview). Source retrieved September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/", "url": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Restore a blob's current content separately from undeleting its versions", "item": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/", "url": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/", "headline": "Restore a blob's current content separately from undeleting its versions", "description": "Undelete restores retained soft-deleted versions together; it does not make one of them the current blob.", "abstract": "Undelete restores retained soft-deleted versions together; it does not make one of them the current blob.", "articleBody": "Source facts\nWith versioning enabled, deleting a blob without a version ID turns its current version into a previous version and leaves no current version. Existing previous versions remain. Deleting a specific previous version while soft delete is enabled instead retains that deleted version for the configured retention period.\nUndelete Blob restores all retained soft-deleted versions, not a selected single version, and promotes none of them to current. Microsoft describes restoring those versions first and then copying the chosen previous version to a new current version. Microsoft Learn.\nApplicability\nIdentify the account’s supported configuration, exact blob and relevant version IDs. Confirm that the required version is still recoverable before planning restoration.\nDSE recommendation\nDSE recommends recording which content the application should receive and who approves that choice. Keep restoration of historical versions separate from any operation that changes current content. Review existing application writes before promoting a version so the recovery decision accounts for concurrent activity. Do not interpret a successful undelete response as proof that the intended application data is now current.\nVerification\nIn an approved recovery test, inspect the recovered version list, identify the selected source and read the current blob after the separate promotion. Compare its content with the approved recovery point. Record any version that could not be recovered and any current-content discrepancy before returning the application to normal use.\nOfficial references\nMicrosoft Learn: Blob Versioning in Azure Storage. Source retrieved September 9, 2026.", "datePublished": "2026-09-10T00:27:03+00:00", "dateModified": "2026-09-10T01:23:49+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-293-restore-a-blob-s-current-content-separately-from-undeleting-its-versions/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Restore a blob's current content separately from undeleting its versions" }, "articleSection": [ "Cybersecurity", "Networks & Infrastructure" ], "keywords": [ "Cybersecurity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 236, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Blob Versioning in Azure Storage - Azure Storage | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/storage/blobs/versioning-overview" } } ] } }