Azure Files Snapshots and Soft Delete Protection

Manage Azure File Share Snapshot Lifecycle and Data Recovery

Share snapshots are point-in-time, read-only copies of an Azure file share, designed to protect against data corruption or accidental deletion. These snapshots are incremental, meaning each snapshot only stores data that has changed since the last version, which minimizes storage costs and improves efficiency. Administrators can maintain up to 200 snapshots per share and keep them for as long as 10 years.

Soft delete works alongside snapshots to prevent permanent loss. When a file share is deleted, it enters a soft-deleted state for a configurable retention period, during which it can be undeleted to restore both the share and all associated snapshots. Storage account locks like CannotDelete and ReadOnly add an extra security layer by restricting unauthorized users from removing or modifying the storage resource.

Azure Backup simplifies snapshot management by automating creation, retention, and deletion through a centralized vault. It uses a Grandfather-Father-Son (GFS) approach to manage daily, weekly, monthly, and yearly recovery points. The service applies a lease on snapshots, acting as a lock to prevent accidental deletion of recovery points during their scheduled lifecycle.

Data recovery can target the file, directory, or full share level by selecting specific restore points in the Azure portal. Users choose from three methods:

• Original Location – overwrites existing files with the snapshot version.
• Alternate Location – restores data to a different share or folder to avoid overwriting.
• Vaulted Backup – uses an isolated, air-gapped copy for recovery if the source account is compromised.

When planning recovery, administrators must consider the Recovery Point Objective (RPO) and Recovery Time Objective (RTO) to meet business continuity goals. Using geo-redundant storage (GRS) replicates snapshots to a secondary region, protecting against regional outages. It is also important to monitor snapshot usage and churn, because high rates of data change increase storage costs and can reduce the number of available recovery points.

Implement Snapshots for Azure Files

Snapshots for Azure Files create point-in-time backups of file shares, allowing restoration to a previous state after accidental deletions or data corruption. To configure snapshots, you must select the storage account hosting the file shares, register it with the Azure Backup service, and then configure the backup policy—including the backup tier, schedule, and retention period.

Managing snapshots effectively requires awareness of the 200 snapshot limit per file share. If backups begin failing because that limit has been reached, you should delete on-demand snapshots to make room for future backups. Snapshots are stored in the same storage account as the backed-up file share, which ensures data consistency and easy access.

Restoring from snapshots involves undeleting the file share if it is in a soft-deleted state, then using the snapshot URL to retrieve and transfer data from the source snapshot to the target file share. The restore time depends on the number of files and directories as well as the available IOPS on the source and target storage accounts.

The benefits of using snapshots for Azure Files include reliable data protection against accidental deletions and corruption, quick recovery to any point in time with minimal downtime, and cost efficiency because snapshots are stored in the same account, reducing the need for separate backup storage.

Configure and Utilize Soft Delete for Azure File Shares

Soft delete acts as a safety net against accidental or malicious deletion of Azure file shares. When enabled at the storage account level, a deleted file share enters a soft-deleted state for a configurable retention period before being permanently purged. The retention period can be set between 1 and 365 days, and Azure Backup enforces a minimum 14-day retention for accounts it protects to meet security best practices.

Recovering a soft-deleted file share is an undelete operation that restores the share, its contents, and all associated snapshots to their exact state immediately before deletion. It is important to note that soft delete protects the share itself, not individual files within it. For file-level recovery, you must use share snapshots or Azure Backup.

From a cost perspective, soft-deleted standard file shares are billed at the regular storage rate, while premium file shares are billed at the snapshot rate for their used capacity during the retention period. The primary operational benefit is enhanced data integrity and business continuity—administrators can recover from human error or automated script failures without needing support tickets or complex restore procedures. When deciding on the retention period, administrators should weigh the benefit of a longer recovery window against the associated storage costs. If share deletion is a routine part of a workflow, a shorter retention period or even disabling soft delete may be appropriate to optimize costs.