{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/", "slug": "dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload", "url": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/" }, "title": "Keep regional backup history separate from a moved Azure workload", "summary": "Does moving an Azure VM to another region carry its existing backup history to a new vault?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:23:34+00:00", "modified_at": "2026-09-10T02:11:17+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 246, "potentially_affected": "Apply this planning distinction to an Azure VM regional move. A resource-group or subscription move is a different operation; review the exact workload's migration and protection requirements rather than treating all moves alike.", "dse_recommendation": "Maintain two explicit recovery records: historical points in the source region and new protection in the destination.", "primary_source": { "name": "How to move Azure Backup Recovery Services vaults - Azure Backup | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/backup/backup-azure-move-recovery-services-vault", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Azure Backup does not support moving a Recovery Services vault between regions or transferring backup data from one Recovery Services vault to another. A resource moved to a new region needs protection in a vault there. After an Azure VM changes region, its earlier vault cannot continue backing it up. If the old backup data was retained, it remains available for recovery through the old vault. Microsoft Learn.

\n

Applicability

\n

Apply this planning distinction to an Azure VM regional move. A resource-group or subscription move is a different operation; review the exact workload’s migration and protection requirements rather than treating all moves alike.

\n

DSE recommendation

\n

Maintain two explicit recovery records: historical points in the source region and new protection in the destination. Before moving the workload, have its owner approve retention of the old history and assign responsibility for both vaults. Schedule destination protection and verify its dependencies as part of the move plan. Do not delete source history merely to make the post-move inventory look tidy, and do not treat a running destination VM as proof of new backup coverage.

\n

Verification

\n

After an approved move, confirm new-region backup jobs and recovery points. Independently exercise an authorized restore from retained source history in a safe destination. Record which vault provides each recovery period and how responders find it. Escalate any gap between the last accepted source backup and the first accepted destination backup.

\n

Official references

\n

Microsoft Learn: How to move Azure Backup Recovery Services vaults.

", "content_text": "Source facts\nAzure Backup does not support moving a Recovery Services vault between regions or transferring backup data from one Recovery Services vault to another. A resource moved to a new region needs protection in a vault there. After an Azure VM changes region, its earlier vault cannot continue backing it up. If the old backup data was retained, it remains available for recovery through the old vault. Microsoft Learn.\nApplicability\nApply this planning distinction to an Azure VM regional move. A resource-group or subscription move is a different operation; review the exact workload’s migration and protection requirements rather than treating all moves alike.\nDSE recommendation\nMaintain two explicit recovery records: historical points in the source region and new protection in the destination. Before moving the workload, have its owner approve retention of the old history and assign responsibility for both vaults. Schedule destination protection and verify its dependencies as part of the move plan. Do not delete source history merely to make the post-move inventory look tidy, and do not treat a running destination VM as proof of new backup coverage.\nVerification\nAfter an approved move, confirm new-region backup jobs and recovery points. Independently exercise an authorized restore from retained source history in a safe destination. Record which vault provides each recovery period and how responders find it. Escalate any gap between the last accepted source backup and the first accepted destination backup.\nOfficial references\nMicrosoft Learn: How to move Azure Backup Recovery Services vaults.", "content_markdown": "## Source facts\n\nAzure Backup does not support moving a Recovery Services vault between regions or transferring backup data from one Recovery Services vault to another. A resource moved to a new region needs protection in a vault there. After an Azure VM changes region, its earlier vault cannot continue backing it up. If the old backup data was retained, it remains available for recovery through the old vault. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/backup/backup-azure-move-recovery-services-vault).\n\n## Applicability\n\nApply this planning distinction to an Azure VM regional move. A resource-group or subscription move is a different operation; review the exact workload’s migration and protection requirements rather than treating all moves alike.\n\n## DSE recommendation\n\nMaintain two explicit recovery records: historical points in the source region and new protection in the destination. Before moving the workload, have its owner approve retention of the old history and assign responsibility for both vaults. Schedule destination protection and verify its dependencies as part of the move plan. Do not delete source history merely to make the post-move inventory look tidy, and do not treat a running destination VM as proof of new backup coverage.\n\n## Verification\n\nAfter an approved move, confirm new-region backup jobs and recovery points. Independently exercise an authorized restore from retained source history in a safe destination. Record which vault provides each recovery period and how responders find it. Escalate any gap between the last accepted source backup and the first accepted destination backup.\n\n## Official references\n\n[Microsoft Learn: How to move Azure Backup Recovery Services vaults](https://learn.microsoft.com/en-us/azure/backup/backup-azure-move-recovery-services-vault)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/", "url": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Keep regional backup history separate from a moved Azure workload", "item": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/", "url": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/", "headline": "Keep regional backup history separate from a moved Azure workload", "description": "Does moving an Azure VM to another region carry its existing backup history to a new vault?", "abstract": "Does moving an Azure VM to another region carry its existing backup history to a new vault?", "articleBody": "Source facts\nAzure Backup does not support moving a Recovery Services vault between regions or transferring backup data from one Recovery Services vault to another. A resource moved to a new region needs protection in a vault there. After an Azure VM changes region, its earlier vault cannot continue backing it up. If the old backup data was retained, it remains available for recovery through the old vault. Microsoft Learn.\nApplicability\nApply this planning distinction to an Azure VM regional move. A resource-group or subscription move is a different operation; review the exact workload’s migration and protection requirements rather than treating all moves alike.\nDSE recommendation\nMaintain two explicit recovery records: historical points in the source region and new protection in the destination. Before moving the workload, have its owner approve retention of the old history and assign responsibility for both vaults. Schedule destination protection and verify its dependencies as part of the move plan. Do not delete source history merely to make the post-move inventory look tidy, and do not treat a running destination VM as proof of new backup coverage.\nVerification\nAfter an approved move, confirm new-region backup jobs and recovery points. Independently exercise an authorized restore from retained source history in a safe destination. Record which vault provides each recovery period and how responders find it. Escalate any gap between the last accepted source backup and the first accepted destination backup.\nOfficial references\nMicrosoft Learn: How to move Azure Backup Recovery Services vaults.", "datePublished": "2026-09-10T00:23:34+00:00", "dateModified": "2026-09-10T02:11:17+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-502-keep-regional-backup-history-separate-from-a-moved-azure-workload/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Keep regional backup history separate from a moved Azure workload" }, "articleSection": [ "Business Continuity", "Networks & Infrastructure" ], "keywords": [ "Business Continuity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 246, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "How to move Azure Backup Recovery Services vaults - Azure Backup | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/backup/backup-azure-move-recovery-services-vault" } } ] } }