Cloud provider discount & payment / Microsoft Azure
Azure Blob Storage
Hot to archive tiers, immutability, lifecycle and egress control
Azure Blob Storage is Microsoft cloud object storage: a file warehouse billed by capacity plus operations. Its value is not storing files but three things that are hard to combine elsewhere — spreading data across four tiers whose costs differ several-fold, locking audit logs into an undeletable state through an immutability (WORM) policy, and sinking old data automatically with lifecycle rules. Below: tiers, billing, redundancy, region and provisioning, with the official live quote as the reference for price.
Specs & pricing
| Access tier | Blob type | Residency | Redundancy | Best for |
|---|---|---|---|---|
| Hot | Block Blob | Chosen region | LRS (default) | Online content, frequently downloaded files |
| Hot | Page Blob | Chosen region | LRS / ZRS | VHD disks, random-write workloads |
| Cool | Block Blob | Chosen region | GRS / GZRS | Data lakes, metadata, backup indexes |
| Cold | Block Blob | Chosen region | GRS / RA-GZRS | Compliance retention, audit logs |
| Archive | Block Blob | Chosen region | GRS | Sealed evidence, rarely touched history |
What Blob Storage actually solves for an enterprise
Enterprises use object storage for three reasons. First, volume unstructured data — backups, recordings, logs, the raw layer of a data lake. Second, compliance retention: financial, medical and public-sector records must stay traceable and untampered, and a policy lock protects the container against even the account owner. Third, cost tiering: the last 7 days and the last 5 years differ in price by a multiple.
- Immutability policy and Legal Hold — container-level lock, undeletable until the date passes
- Soft delete and versioning — recover an accidental overwrite; on by default for new accounts
- Native SFTP endpoint — upload without standing up an FTP server, good for legacy systems
- ADLS Gen2 namespace — mount as HDFS paths so Spark reads and writes directly
Splitting across four tiers: capacity, retrieval latency and minimum retention
Early deletion costs money. Cold carries 30 days and Archive 180 days of minimum retention; deleting inside that window incurs a per-tier early-deletion charge priced on the official page.
| Tier | Relative price | Minimum retention | Retrieval | Put here |
|---|---|---|---|---|
| Hot | Highest | None | Immediate | Hot content, frequent read/write |
| Cool | A third to a half of Hot | None | Immediate | Data lakes, backup indexes |
| Cold | A fifth to a half of Hot | 30 days | Immediate | Compliance retention, audit logs |
| Archive | Lowest, about an order under | 180 days | Rehydration takes hours | Sealed evidence, history |
How Blob is billed: capacity, transactions and egress are three meters
- Capacity — tier rate times actual capacity, falling as data sinks
- Transactions — per 10,000 operations; many small hot files can exceed the capacity charge
- Egress — per GB for internet and cross-region traffic. Same-region Azure traffic is not charged
- Retrieval — rehydrating from Archive is billed separately; demotion generally is not
- Levers — lifecycle rules plus a CDN in front
Region and redundancy: choosing between LRS, ZRS and GRS
| Redundancy | Copy strategy | Best for | Watch out for |
|---|---|---|---|
| LRS | Three copies in one zone | Rebuildable cache, temporary data | Cheapest; a zone outage takes it all down |
| ZRS | Three copies across zones | Production data | Not offered in every region or blob type |
| GRS | Six copies across regions | Production data needing cross-region DR | Higher write latency; replica conflicts |
| RA-GRS | Secondary replica readable | DR drills, remote reads | Adds read traffic cost |
Storing in Azure Hong Kong (East Asia) and serving Asia-Pacific
With data in Hong Kong East Asia, reads from Hong Kong, Taiwan and Southeast Asia usually land in the 20–40ms band; Singapore around 30–50ms, Tokyo and Seoul 50–70ms. Two effects: egress rates are tiered by region, and compliance logs should use cross-region redundancy with the replica in a region your regulator accepts.
Same-region traffic is free — use that. Put the app and the Blob account in one region and app-to-blob traffic costs nothing egress. Only downloads to public users are billed.
Azure Blob versus S3, OSS and GCS
| Dimension | Azure Blob | AWS S3 | Alibaba OSS | Google Cloud Storage |
|---|---|---|---|---|
| Access tiers | Hot / Cool / Cold / Archive | Standard / IA / two Glacier classes | Standard / IA / Archive / Cold Archive | Standard / Nearline / Coldline / Archive |
| Immutable retention | Immutability policy plus Legal Hold | Object Lock (WORM) | WORM compliance retention policy | Bucket Lock (retention policy) |
| File protocol entry | Native SFTP endpoint | Requires a separate build | SFTP / FTP supported | gcloud and Transfer Service |
| ADLS Gen2 namespace | Yes (HDFS compatible) | No | No | No |
| Account authentication | Native Entra ID RBAC | IAM | RAM / STS | IAM |
Opening and settling Blob billing through us
- Tell us your data volume, access pattern and residency requirement (for example "2TB of logs monthly, keep 5 years")
- We handle the official Azure subscription registration, company entity and payment verification, and provision the account
- You create the storage account in the portal. Check the region field carefully — it cannot be changed after creation
- Configure lifecycle rules to sink old data first, then apply an immutability policy to retained containers
- Settle by USDT, other crypto or bank transfer, with no personal credit card and no personal identity documents
Why Blob bills run over budget
- Counting capacity but not transactions — many small hot files, transaction cost can exceed capacity cost
- Forgetting minimum retention — deleting shortly after archiving triggers the early-deletion fee
- No lifecycle rules — old data still in the Hot tier, paying the highest rate
- Ignoring cross-region reads — app and storage in different regions bill every read as egress
- Production container left unlocked — a retention requirement with mutable logs
Typical workloads
Open a Microsoft Azure account with us
We handle official provisioning and payment verification — no personal card, no identity documents. Order directly in the vendor console once live.
More Microsoft Azure products
Azure Virtual Machines
Compliance-first compute · B2s and D2s_v5 sizing, opened and paid for by us
Azure SQL Database
vCore, Serverless and Hyperscale sizing, compliance and Entra ID integration
Azure discounts & reseller pricing
Azure runs on CSP — the partner sets the discount, so the tier matters more than elsewhere
Related reading
AWS Shield Advanced: what is free, what is billed
Shield Advanced covering your WAF costs is true, with four boundaries: only protected resources, only standard features, and subject to a request ceiling. Bot Control, CAPTCHA and web ACLs above 1,500 WCUs are still billed separately.
Cloud CostAWS private pricing (EDP): threshold, risk, shortcut
Private pricing is the highest-threshold layer of the AWS discount system: a cross-service discount rather than a single-service commitment. Two traps come first - a shortfall payment if you miss the commitment, and mandatory enterprise support. And AWS states plainly that buying through a partner qualifies too.
Cloud CostMulti-cloud cost visibility: unify categories first
Each provider runs its own billing system, so there is no ready-made unified view. Most people reach for a tool first, which reverses the order: unify the cost categories and the tagging scheme first. Four accounting mismatches will make the numbers disagree.