🛡️ Azure Storage Account is located in a less cost-effective region🟢

• Contextual name: 🛡️ Storage Account is located in a less cost-effective region🟢
• ID: /ce/ca/azure/storage/account-cost-effective-region
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: BEST_PRACTICE
• Policy Categories: COST

Stats

not available

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 Azure Storage Account
  • 🔌 Azure Storage Account - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

This policy identifies Azure Storage Accounts that are provisioned in Azure regions known to have higher pricing compared to nearby alternatives.

Rationale

Selecting the appropriate Azure region is essential for optimizing both cost and performance. Service pricing can vary across regions due to factors such as infrastructure expenses, energy costs, and local taxes. Deploying workloads in cost-efficient regions can result in substantial savings on monthly Azure expenditures.

Impact

Migrating workloads to different regions requires careful planning to avoid service disruptions and to ensure latency, compliance, and data sovereignty requirements continue to be met.

Audit

This policy flags an Azure Storage Account as INCOMPLIANT if it is running in one of the following regions identified as less cost-efficient:

Region	Recommended Alternative

... see more

Remediation

Open File

Remediation

Migrate Azure Storage Account to Another Region

Summary Workflow

1. Export the Resource Manager template of the existing storage account.
2. Modify the template to specify the new storage account name and target region.
3. Deploy the modified template to create a new storage account in the target region.
4. Configure the new storage account settings to match the original account.
5. Transfer data from the original storage account to the new account using AzCopy or another tool.
6. Decommission the original storage account and associated resources in the source region.

1. Export the Resource Manager Template

Export the template:

$resource = Get-AzResource `
    -ResourceGroupName {{resource-group-name}} `
    -ResourceName {{storage-account-name}} `
    -ResourceType Microsoft.Storage/storageAccounts
Export-AzResourceGroup `
    -ResourceGroupName {{resource-group-name}} `
    -Resource $resource.ResourceId

This command saves a JSON template to your current directory.

2. Modify the Template

... see more

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 Cloudaware Framework → 💼 Resource Optimization			37		no data