Immutable storage for Azure Blob

Immutable storage?for Azure Blob Storage enables users to store business-critical data in a WORM (Write Once, Read Many) state. While in a WORM state, data can’t be modified or deleted for a user-specified interval. By configuring immutability policies for blob data, you can protect your data from overwrites and deletes. Policies are applied at the container level and audit logs are available.

The next diagram shows how time-based retention policies and legal holds prevent write and delete operations.

Immutable storage for Azure Blob storage supports two types of immutability policies.

• Time-based retention policies: With a?time-based retention policy, users can set policies to store data for a specified interval. When a time-based retention policy is in place, objects can be created and read, but not modified or deleted. After the retention period has expired, objects can be deleted but not overwritten.
• Legal hold policies: A?legal hold?stores immutable data until the legal hold is explicitly cleared. When a legal hold is set, objects can be created and read, but not modified or deleted.