What happens to a customer managed key in a secondary Azure region ?

Question

I have got a storage account created in primary region A, and a similar storage account created in region B to server as a disaster recovery solution. I am unsure what happens with the customer managed key used within the storage account, does that need to be created on a secondary key vault located in the secondary zone ? what happens in the event that the primary site is lost ?

Answer 1

Hello,

I would recommend reading up on the failover solution:

Failover across regions

https://learn.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance#failover-across-regions

If you're in a region that automatically replicates your key vault to a secondary region, then in the rare event that an entire Azure region is unavailable, the requests that you make of Azure Key Vault in that region are automatically routed (failed over) to a secondary region. When the primary region is available again, requests are routed back (failed back) to the primary region. Again, you don't need to take any action because this happens automatically.

Also I would take note (since I don't know what regions you are using):

If this is helpful please accept answer.