You can now enable vaulted backups for Azure Cosmos DB
accounts, protecting mission-critical data with secure, isolated, and resilient
backups. Azure Backup for Cosmos DB, now in preview, supports cyber-resiliency
and compliance needs, even in scenarios involving accidental deletion,
malicious activity, or ransomware. With vaulted backups, Azure Backup maintains
an independent copy of your Cosmos DB data in a vault that is isolated from the
source account, strengthening protection against operational and security
risks.
Key capabilities:
- Off-site, isolated
protection. Store Cosmos DB backups in an Azure Backup vault, isolated from the
source account to enable recovery even if the source is compromised.
- Resilience. Vaulted backups
protect against accidental deletion, insider threats, and ransomware scenarios.
- Policy-based, automated
backups. Configure scheduled backups using Azure Backup policies, reducing
manual efforts and improving consistency.
- Long-term retention for
compliance. Retain backups for extended durations of up to 10 years to meet
regulatory and audit requirements.
- Built-in protections such
as encryption, soft delete, immutability, and role-based access control help
safeguard backup data in the vault.
Billing will be enabled from July
1, 2026.
Learn more: