Access tiers for blob data - Azure Storage (2024)

  • Article

Data stored in the cloud grows at an exponential pace. To manage costs for your expanding storage needs, it can be helpful to organize your data based on how frequently it will be accessed and how long it will be retained. Azure storage offers different access tiers so that you can store your blob data in the most cost-effective manner based on how it's being used. Azure Storage access tiers include:

  • Hot tier - An online tier optimized for storing data that is accessed or modified frequently. The hot tier has the highest storage costs, but the lowest access costs.
  • Cool tier - An online tier optimized for storing data that is infrequently accessed or modified. Data in the cool tier should be stored for a minimum of 30 days. The cool tier has lower storage costs and higher access costs compared to the hot tier.
  • Cold tier - An online tier optimized for storing data that is rarely accessed or modified, but still requires fast retrieval. Data in the cold tier should be stored for a minimum of 90 days. The cold tier has lower storage costs and higher access costs compared to the cool tier.
  • Archive tier - An offline tier optimized for storing data that is rarely accessed, and that has flexible latency requirements, on the order of hours. Data in the archive tier should be stored for a minimum of 180 days.

Azure storage capacity limits are set at the account level, rather than according to access tier. You can choose to maximize your capacity usage in one tier, or to distribute capacity across two or more tiers.

Note

Setting the access tier is only allowed on Block Blobs. They are not supported for Append and Page Blobs.

Online access tiers

When your data is stored in an online access tier (either hot, cool or cold), users can access it immediately. The hot tier is the best choice for data that is in active use. The cool or cold tier is ideal for data that is accessed less frequently, but that still must be available for reading and writing.

Example usage scenarios for the hot tier include:

  • Data that's in active use or data that you expect will require frequent reads and writes.
  • Data that's staged for processing and eventual migration to the cool access tier.

Usage scenarios for the cool and cold access tiers include:

  • Short-term data backup and disaster recovery.
  • Older data sets that aren't used frequently, but are expected to be available for immediate access.
  • Large data sets that need to be stored in a cost-effective way while other data is being gathered for processing.

To learn how to move a blob to the hot, cool, or cold tier, see Set a blob's access tier.

Data in the cool and cold tiers have slightly lower availability, but offer the same high durability, retrieval latency, and throughput characteristics as the hot tier. For data in the cool or cold tiers, slightly lower availability and higher access costs may be acceptable trade-offs for lower overall storage costs, as compared to the hot tier. For more information, see SLA for storage.

Blobs are subject to an early deletion penalty if they are deleted or moved to a different tier before the minimum number of days required by the tier have transpired. For example, a blob in the cool tier in a general-purpose v2 account is subject to an early deletion penalty if it's deleted or moved to a different tier before 30 days has elapsed. For a blob in the cold tier, the deletion penalty applies if it's deleted or moved to a different tier before 90 days has elapsed. This charge is prorated. For example, if a blob is moved to the cool tier and then deleted after 21 days, you'll be charged an early deletion fee equivalent to 9 (30 minus 21) days of storing that blob in the cool tier.

Note

In an account that has soft delete enabled, a blob is considered deleted after it is deleted and retention period expires. Until that period expires, the blob is only soft-deleted and is not subject to the early deletion penalty.

The hot, cool, and cold tiers support all redundancy configurations. For more information about data redundancy options in Azure Storage, see Azure Storage redundancy.

Archive access tier

The archive tier is an offline tier for storing data that is rarely accessed. The archive access tier has the lowest storage cost. However, this tier has higher data retrieval costs with a higher latency as compared to the hot, cool, and cold tiers. Example usage scenarios for the archive access tier include:

  • Long-term backup, secondary backup, and archival datasets
  • Original (raw) data that must be preserved, even after it has been processed into final usable form
  • Compliance and archival data that needs to be stored for a long time and is hardly ever accessed

To learn how to move a blob to the archive tier, see Archive a blob.

Data must remain in the archive tier for at least 180 days or be subject to an early deletion charge. For example, if a blob is moved to the archive tier and then deleted or moved to the hot tier after 45 days, you'll be charged an early deletion fee equivalent to 135 (180 minus 45) days of storing that blob in the archive tier.

Note

In an account that has soft delete enabled, a blob is considered deleted after it is deleted and retention period expires. Until that period expires, the blob is only soft-deleted and is not subject to the early deletion penalty.

While a blob is in the archive tier, it can't be read or modified. To read or download a blob in the archive tier, you must first rehydrate it to an online tier, either hot, cool, or cold. Data in the archive tier can take up to 15 hours to rehydrate, depending on the priority you specify for the rehydration operation. For more information about blob rehydration, see Overview of blob rehydration from the archive tier.

An archived blob's metadata remains available for read access, so that you can list the blob and its properties, metadata, and index tags. Metadata for a blob in the archive tier is read-only, while blob index tags can be read or written. Storage costs for metadata of archived blobs will be charged on cool tier rates.Snapshots aren't supported for archived blobs.

The following operations are supported for blobs in the archive tier:

  • Copy Blob
  • Delete Blob
  • Undelete Blob
  • Find Blobs by Tags
  • Get Blob Metadata
  • Get Blob Properties
  • Get Blob Tags
  • List Blobs
  • Set Blob Tags
  • Set Blob Tier

Only storage accounts that are configured for LRS, GRS, or RA-GRS support moving blobs to the archive tier. The archive tier isn't supported for ZRS, GZRS, or RA-GZRS accounts. For more information about redundancy configurations for Azure Storage, see Azure Storage redundancy.

To change the redundancy configuration for a storage account that contains blobs in the archive tier, you must first rehydrate all archived blobs to the hot, cool, or cold tier. Because rehydration operations can be costly and time-consuming, Microsoft recommends that you avoid changing the redundancy configuration of a storage account that contains archived blobs.

Migrating a storage account from LRS to GRS is supported as long as no blobs were moved to the archive tier while the account was configured for LRS. An account can be moved back to GRS if the update is performed less than 30 days from the time the account became LRS, and no blobs were moved to the archive tier while the account was set to LRS.

Default account access tier setting

Storage accounts have a default access tier setting that indicates the online tier in which a new blob is created. The default access tier setting can be set to either hot or cool. Users can override the default setting for an individual blob when uploading the blob or changing its tier.

The default access tier for a new general-purpose v2 storage account is set to the hot tier by default. You can change the default access tier setting when you create a storage account or after it's created. If you don't change this setting on the storage account or explicitly set the tier when uploading a blob, then a new blob is uploaded to the hot tier by default.

A blob that doesn't have an explicitly assigned tier infers its tier from the default account access tier setting. If a blob's access tier is inferred from the default account access tier setting, then the Azure portal displays the access tier as Hot (inferred) or Cool (inferred).

Changing the default access tier setting for a storage account applies to all blobs in the account for which an access tier hasn't been explicitly set. If you toggle the default access tier setting to a cooler tier in a general-purpose v2 account, then you're charged for write operations (per 10,000) for all blobs for which the access tier is inferred. You're charged for both read operations (per 10,000) and data retrieval (per GB) if you toggle to a warmer tier in a general-purpose v2 account.

When you create a legacy Blob Storage account, you must specify the default access tier setting as hot or cool at create time. There's no charge for changing the default account access tier setting to a cooler tier in a legacy Blob Storage account. You're charged for both read operations (per 10,000) and data retrieval (per GB) if you toggle to a warmer tier in a Blob Storage account. Microsoft recommends using general-purpose v2 storage accounts rather than Blob Storage accounts when possible.

Note

The cold tier and the archive tier are not supported as the default access tier for a storage account.

Setting or changing a blob's tier

To explicitly set a blob's tier when you create it, specify the tier when you upload the blob.

After a blob is created, you can change its tier in either of the following ways:

  • By calling the Set Blob Tier operation, either directly or via a lifecycle management policy. Calling Set Blob Tier is typically the best option when you're changing a blob's tier from a warmer tier to a cooler one.

    Note

    You can't rehydrate an archived blob to an online tier by using lifecycle management policies.

  • By calling the Copy Blob operation to copy a blob from one tier to another. Calling Copy Blob is recommended for most scenarios where you're rehydrating a blob from the archive tier to an online tier, or moving a blob from cool or cold to hot. By copying a blob, you can avoid the early deletion penalty, if the required storage interval for the source blob hasn't yet elapsed. However, copying a blob results in capacity charges for two blobs, the source blob and the destination blob.

Changing a blob's tier from a warmer tier to a cooler one is instantaneous, as is changing from cold or cool to hot. Rehydrating a blob from the archive tier to an online tier such as the hot, cool, or cold tier can take up to 15 hours.

Keep in mind the following points when changing a blob's tier:

  • You can't call Set Blob Tier on a blob that uses an encryption scope. For more information about encryption scopes, see Encryption scopes for Blob storage.
  • If a blob is explicitly moved to the cool or cold tier and then moved to the archive tier, the early deletion charge applies.

Blob lifecycle management

Blob storage lifecycle management offers a rule-based policy that you can use to transition your data to the desired access tier when your specified conditions are met. You can also use lifecycle management to expire data at the end of its life. See Optimize costs by automating Azure Blob Storage access tiers to learn more.

Note

Data stored in a premium block blob storage account cannot be tiered to hot, cool, cold or archive by using Set Blob Tier or using Azure Blob Storage lifecycle management. To move data, you must synchronously copy blobs from the block blob storage account to the hot tier in a different account using the Put Block From URL API or a version of AzCopy that supports this API. The Put Block From URL API synchronously copies data on the server, meaning the call completes only once all the data is moved from the original server location to the destination location.

Summary of access tier options

The following table summarizes the features of the hot, cool, cold, and archive access tiers.

Hot tierCool tierCold tierArchive tier
Availability99.9%99%99%99%
Availability
(RA-GRS reads)
99.99%99.9%99.9%99.9%
Usage chargesHigher storage costs, but lower access and transaction costsLower storage costs, but higher access and transaction costsLower storage costs, but higher access and transaction costsLowest storage costs, but highest access, and transaction costs
Minimum recommended data retention periodN/A30 days190 days1180 days
Latency
(Time to first byte)
MillisecondsMillisecondsMillisecondsHours2
Supported redundancy configurationsAllAllAllLRS, GRS, and RA-GRS3 only

1 Objects in the cool tier on general-purpose v2 accounts have a minimum retention duration of 30 days. Objects in the cold tier on general-purpose v2 accounts have a minimum retention duration of 90 days. For Blob Storage accounts, there's no minimum retention duration for the cool or cold tier.

2 When rehydrating a blob from the archive tier, you can choose either a standard or high rehydration priority option. Each offers different retrieval latencies and costs. For more information, see Overview of blob rehydration from the archive tier.

3 For more information about redundancy configurations in Azure Storage, see Azure Storage redundancy.

Pricing and billing

All storage accounts use a pricing model for block blob storage that is based on a blob's tier. Keep in mind the billing considerations described in the following sections.

For more information about pricing for block blobs, see Block blob pricing.

Storage capacity costs

In addition to the amount of data stored, the cost of storing data varies depending on the access tier. The per-gigabyte capacity cost decreases as the tier gets cooler.

Data access costs

Data access charges increase as the tier gets cooler. For data in the cool, cold and archive access tier, you're charged a per-gigabyte data access charge for reads.

Transaction costs

A per-transaction charge applies to all tiers and increases as the tier gets cooler.

Geo-replication data transfer costs

This charge only applies to accounts with geo-replication configured, including GRS, RA-GRS and GZRS. Geo-replication data transfer incurs a per-gigabyte charge.

Outbound data transfer costs

Outbound data transfers (data that is transferred out of an Azure region) incur billing for bandwidth usage on a per-gigabyte basis. For more information on outbound data transfer charges, see Bandwidth Pricing Details page.

Changing the default account access tier

Changing the account access tier results in tier change charges for all blobs that don't already have a tier explicitly set. For more information, see the following section, Changing a blob's access tier.

Changing a blob's access tier

Keep in mind the following billing impacts when changing a blob's tier:

  • When a blob is uploaded or moved between tiers, it's charged at the corresponding rate immediately upon upload or tier change.
  • When a blob is moved to a cooler tier, the operation is billed as a write operation to the destination tier, where the write operation (per 10,000) and data write (per GB) charges of the destination tier apply.
  • When a blob is moved to a warmer tier, the operation is billed as a read from the source tier, where the read operation (per 10,000) and data retrieval (per GB) charges of the source tier apply. Early deletion charges for any blob moved out of the cool, cold or archive tier may apply as well.
  • While a blob is being rehydrated from the archive tier, that blob's data is billed as archived data until the data is restored and the blob's tier changes to hot, cool, or cold.

The following table summarizes how tier changes are billed.

Write charges (operation + access)Read charges (operation + access)
Hot to cool
Hot to cold
Hot to archive
Cool to cold
Cool to archive
Cold to archive
Archive to cold
Archive to cool
Archive to hot
Cold to cool
Cold to hot
Cool to hot

Changing the access tier for a blob when versioning is enabled, or if the blob has snapshots, might result in more charges. For information about blobs with versioning enabled, see Pricing and billing in the blob versioning documentation. For information about blobs with snapshots, see Pricing and billing in the blob snapshots documentation.

Cold tier

Limitations and known issues

  • The default access tier setting of the account can't be set to cold tier.

Required versions of REST, SDKs, and tools

EnvironmentMinimum version
REST API2021-21-02
.NET12.15.0
Java12.21.0
Python12.15.0
JavaScript12.13.0
PowerShell (Az.Storage)5.8.0
Azure CLI2.50.0
AzCopy10.18.1
Azure Storage Explorer1.29.0

Feature support

Support for this feature might be impacted by enabling Data Lake Storage Gen2, Network File System (NFS) 3.0 protocol, or the SSH File Transfer Protocol (SFTP). If you've enabled any of these capabilities, see Blob Storage feature support in Azure Storage accounts to assess support for this feature.

Next steps

  • Set a blob's access tier
  • Archive a blob
  • Optimize costs by automatically managing the data lifecycle
  • Best practices for using blob access tiers
Access tiers for blob data - Azure Storage (2024)

FAQs

What are the Azure blob storage access tiers? ›

Azure offers three storage tiers to store data in blob storage: Hot Access tier, Cool Access tier, and Archive tier. These tiers target data at different stages of its lifecycle and offer cost-effective storage options for different use cases.

What statement best describes Azure blob storage access tiers? ›

What statement best describes Azure Blob Storage access tiers? The cool access tier is for frequent access of objects in the storage account. The hot access tier is for storing large amounts of data that's infrequently accessed. The administrator can switch between hot and cool performance tiers at any time.

Which Azure Blob Storage access tier should you use for data that will be used once per year and can have an access time that takes more than an hour? ›

Archive tier - An offline tier optimized for storing data that is rarely accessed, and that has flexible latency requirements, on the order of hours. Data in the archive tier should be stored for a minimum of 180 days.

Which access levels are available for storage account blob containers? ›

Set the anonymous access level for a container
  • No public read access: The container and its blobs can be accessed only with an authorized request. ...
  • Public read access for blobs only: Blobs within the container can be read by anonymous request, but container data is not available anonymously.
Sep 29, 2023

What are the 3 tiers of storage? ›

You can use Tier 0 for high performance workloads. You can use Tier 1 for mission-critical or highly sensitive files. You can use Tier 2 and Tier 3 for backups of mission critical data, which requires high reliability but not instant retrieval from backup.

How many types of access tiers are there in Microsoft Azure? ›

Azure storage offers different access tiers so that you can store your blob data in the most cost-effective manner based on how it's being used. Learn about the hot, cool, cold, and archive access tiers for Blob Storage.

How to access Azure Blob Storage? ›

Open Storage Explorer. In the left pane, expand the storage account containing the blob container you wish to view. Expand the storage account's Blob Containers. Right-click the blob container you wish to view, and - from the context menu - select Open Blob Container Editor.

Does the hot access tier is available for blob data that uses standard storage? ›

Hot access tier is available for both standard and premium performance tiers. It offers high performance and availability, but also high cost. It is suitable for data that is accessed frequently and requires fast access, such as active data or frequently accessed blobs.

Which storage tier should you use? ›

Choose the most cost-efficient access tiers

Choose from three tiers that are designed to optimize your costs around data use. For example, the hot tier has a higher storage cost but lower read cost. Therefore, if you plan to access data frequently, the hot tier might be the most cost-efficient choice.

Which blob access tier is best for data that is infrequently accessed and stored for at least 30 days? ›

Cold tier is the most cost-effective Azure Blob Storage offering to store infrequently accessed data with long term retention requirements, while maintaining instant access. Blob access tiers maximize cost savings based on data access patterns.

Which Azure Blob Storage tier should be reserved for data that needs to be kept but when needed isn t needed immediately? ›

The Cool tier is best suited for storing data that needs to be kept but isn't needed immediately, as it offers lower storage costs with slightly higher latency compared to the Hot tier.

How do you know if a blob access tier is inherited from the storage account tier setting? ›

Select Create a resource->Storage->Storage account from the Azure portal. For the Access tier (default) level, choose between Hot and Cool. Note that any blob created in the storage account will inherit this tier.

What is the default access level for newly created storage account blobs? ›

Public Access is enabled by default at the storage account level. However, public access is disabled by default at the container level. In this situation, no public access to containers or their blobs is possible.

What is the difference between Azure storage account blob and container? ›

A container contains properties, metadata, and zero or more blobs. If your account has a hierarchical namespace, then a container can also contain zero or more directories and those directories can contain zero or more blobs. A blob is any single entity comprised of binary data, properties, and metadata.

What are the Azure permissions levels? ›

Permissions are defined at different levels: organization/collection, project, or object. Other permissions are managed through role-based assignments, such as team administrator, extension management, and various pipeline resource roles.

What are the levels of Azure resource group access? ›

This is helpful if you want to make someone a Website Contributor, but only for one resource group. In Azure, you can specify a scope at four levels: management group, subscription, resource group, or resource. Scopes are structured in a parent-child relationship. You can assign roles at any of these levels of scope.

What are the two main tiers of storage? ›

In a basic configuration, mission-critical data might be assigned to a high-performing tier that consists of flash solid-state drives (SSDs) and Intel Optane memory modules, while less critical data is written to a second tier made up only of hard disk drives (HDDs).

Top Articles
Latest Posts
Article information

Author: Msgr. Benton Quitzon

Last Updated:

Views: 5862

Rating: 4.2 / 5 (43 voted)

Reviews: 90% of readers found this page helpful

Author information

Name: Msgr. Benton Quitzon

Birthday: 2001-08-13

Address: 96487 Kris Cliff, Teresiafurt, WI 95201

Phone: +9418513585781

Job: Senior Designer

Hobby: Calligraphy, Rowing, Vacation, Geocaching, Web surfing, Electronics, Electronics

Introduction: My name is Msgr. Benton Quitzon, I am a comfortable, charming, thankful, happy, adventurous, handsome, precious person who loves writing and wants to share my knowledge and understanding with you.