Does repositories in Azure get created for workers and log

[sumeet]

Hi Team,

Hope you are well.
We have a Veeam backup for Azure appliance deployment, which we use for Azure VMs backup.
The backups are working fine to the local repository and backup copy too.

What we have observed is that two additional storage accounts, whose name start with veeam<characters> exists on the setup.
From the events logs, it looks like these two repositories are being used by veeam backup for Azure appliance for workers and log.
Is this correct? I need help with following questions:

1. Are these two additional storage accounts created by VBAz appliance?
2. Is it correct that this is used for workers deployment and log?
3. How does VBAz appliance access these storage accounts? Does it use secret keys?
4. What if we want to rotate the storage keys? Will this break VBAz? If yes, what is the correct process to rotate the storage/secret keys (this is a requirement from security team)
5. Any documentation that can help with additional details?
6. If this is incorrect that these storage accounts are not used/created by VBAz and no such storage account is required for workers or logs - please confirm. Then can these SAs be disabled? Will this impact the backup or appliance functionality.

Thanks.

[nielsengelen]

Hi,

1. Yes, we make those. These should be temporary normally.
2. They are used for both.
3 and 4. Let me verify the latest logic.
5. I’ll see if we can add a section to the user guide.