Specify the transfer direction before copying Azure VM files with SCP

Source facts

Microsoft documents SCP transfers in both directions between a workstation and an Azure VM, with SSH enabled on the VM and an SCP client on the workstation. SCP relies on SSH for authentication and encrypted transport; the documented directory-download example uses the recursive option. Microsoft Learn

Applicability

This guide is for an operator preparing a workstation-to-VM file transfer or collecting a directory of VM logs using SCP.

DSE recommendation

DSE recommends writing the source, destination, and intended direction into the transfer request before constructing the command. Identify the remote user and host separately from the remote directory. For a log collection, agree which directory is in scope and where the local copy belongs. Use a nonsensitive test file first, and arrange an appropriate destination for any confidential material before moving the real files.

Verification

Compare the resulting file names and directory structure with the approved request. Confirm that the copy appeared on the intended side of the connection and that the expected files can be read. Record incomplete or unexpected transfers for investigation, and remove temporary test material only after the destination has been checked.

Official references

• Microsoft: Use SCP to move files to and from a VM – Azure Virtual Machines | Microsoft Learn