Azure Storage Discovery Preview: Centralized Blob Insights with Copilot

Microsoft has opened public preview of Azure Storage Discovery, a fully managed service that gives organizations a centralized, tenant‑wide view of their Azure Blob Storage estate and pairs that visibility with AI‑driven, natural‑language interrogation via Azure Copilot to speed cost, security, and operational decisions.

Overview​

Azure Storage Discovery is presented as a “single pane of glass” for Blob Storage: it aggregates capacity, activity, error and configuration telemetry across subscriptions and resource groups, presents interactive reports in the Azure Portal, and lets teams ask questions in everyday language through Azure Copilot to get synthesized insights and actionable recommendations. Microsoft’s announcement positions the service as an enabler for FinOps, security teams, and cloud platform engineers to discover cost hot spots, spot configuration drift, and analyze longer‑term trends without building bespoke scripts or stitching together multiple tooling sources. (azure.microsoft.com) (learn.microsoft.com)

---

Background: why the market needs unified storage discovery​

Modern enterprises often run hundreds or thousands of storage accounts across multiple subscriptions and regions. That scale creates three recurring problems:

• Fragmented visibility — storage metrics and configurations are scattered across accounts, subscriptions, and tooling.
• Cost leakage — dormant or mis‑tiered blobs and orphaned accounts generate avoidable spend.
• Security and compliance blind spots — misconfigurations and anomalous activity can be hard to detect when telemetry is siloed.

Organizations have historically patched these gaps with custom scripts, ad‑hoc inventories, and third‑party products, but those approaches are time consuming to maintain and often lack tenant‑wide context. Azure Storage Discovery is designed to reduce that operational friction by automatically discovering storage resources and surfacing consolidated analytics in a managed, portal‑native experience. (azure.microsoft.com)

What Azure Storage Discovery does — features and telemetry​

Azure Storage Discovery focuses on several core capabilities that together deliver both broad and deep storage insight:

• Tenant‑wide inventory and scale: The service can analyze up to one million storage accounts within a single workspace, enabling centralized reporting for very large estates. (azure.microsoft.com)
• Capacity analytics: Trends, distributions, and top‑account breakdowns for object counts and total stored bytes.
• Activity metrics: Transaction volumes, ingress/egress patterns and hourly/daily aggregates depending on SKU.
• Error telemetry: Aggregated transaction error rates and anomaly detection to help identify throttling or systemic failures.
• Configuration and security posture: Resource configuration and security configuration checks (encryption, redundancy, access settings) surfaced for review and prioritization.
• Interactive portal reports: Pre‑built dashboards in the Azure Portal with filters (region, redundancy, encryption, performance tier) and direct navigation to underlying resources. (learn.microsoft.com)
• Natural language insights: Integration with Azure Copilot to ask plain‑English questions (for example: “Which regions are adding the most storage?” or “Where are my costs growing fastest?”) and receive synthesized responses without writing queries. (azure.microsoft.com)

These features are designed to lower time‑to‑insight for monitoring, FinOps, security reviews, and capacity planning. Early documentation and Microsoft’s blog post emphasize the combination of scale plus conversational AI as a differentiator for enterprise users. (azure.microsoft.com, learn.microsoft.com)

How insights are computed and surfaced​

Storage Discovery ingests metadata and telemetry for storage accounts defined within a workspace scope; it computes aggregates for capacity, activity, and error metrics and retains the results in a managed service. The system performs a backfill on workspace creation so that recent historical data is available immediately (Microsoft documents backfill windows), and the dashboards populate within hours after initial deployment. The service is implemented as a fully managed Azure resource and does not require deploying agents to storage accounts. (learn.microsoft.com)

---

How to get started: workspaces, scopes, and permissions​

The onboarding model is deliberately straightforward:

• Create an Azure Storage Discovery workspace in a chosen subscription and region.
• Define workspaceRoots by adding subscriptions and/or resource groups that act as the discovery roots.
• Create up to five named scopes (logical groupings), typically driven by ARM tags or resource filters, to segment reporting across business units, workloads, or environments.
• Wait for access checks to succeed; the service requires Reader access to storage accounts that are in scope. After the workspace is deployed, metrics generally appear in reports within hours (note: some docs state it can take up to 24 hours for resource changes to be reflected). (learn.microsoft.com)

Important operational details and constraints to be aware of:

• A workspace can include up to 100 workspaceRoots (subscriptions/resource groups) for scanning. (learn.microsoft.com)
• During preview, resources are discovered only for storage accounts that contain blobs; empty accounts may not show up. (learn.microsoft.com)
• Discovery honors existing Azure RBAC and conditional access policies; only users with appropriate permissions will see sensitive data. (azure.microsoft.com)

---

Data retention, backfill and billing — what organizations must know​

Microsoft documents two pricing SKUs for each workspace: Free and Standard. Each SKU exposes different insight breadth and retention characteristics:

• Free plan: capacity and configuration insights, with 15 days backfill and retention.
• Standard plan: adds transactions, activity, errors, and security configuration insights, with up to 30 days backfill and 18 months retention for historical analysis. (learn.microsoft.com)

Billing and preview timing:

• Microsoft is offering both Free and Standard plans at no cost during the public preview; billing is scheduled to start on October 1, 2025 and Microsoft states that the preview pricing is free through September 30, 2025. Detailed priced rates per storage account and per object will be published before billing begins. (learn.microsoft.com, azure.microsoft.com)

Caveat on pricing numbers: publicly circulating per‑GB prices found in some early posts and forum summaries are not reflected in Microsoft’s official pricing pages and should be treated as speculative until Microsoft publishes final rate cards. Any financial planning should rely on Microsoft Learn and the Azure pricing pages for definitive numbers. (learn.microsoft.com)

---

Copilot integration: what conversational analytics enables — and what it doesn’t​

Azure Storage Discovery’s integration with Azure Copilot is arguably the feature most likely to change how non‑specialists interact with storage telemetry. Copilot can:

• Accept conversational queries across capacity, activity, cost and security axes and return synthesized insights that span multiple accounts and scopes.
• Drive faster triage by surfacing the most likely causes and linking directly to the storage accounts or dashboards that need attention.
• Democratize reporting so Finance or Product owners can ask plain‑English questions and get data‑backed answers without writing Kusto or scripts. (azure.microsoft.com)

However, there are important limitations and guardrails:

• Copilot’s outputs are only as good as the underlying telemetry and the clarity of the prompt; critical compliance or forensic conclusions should be validated with deterministic exports or native logs.
• Natural language interfaces can oversimplify complex configurations; administrators should treat Copilot answers as insight aids rather than authoritative change orders.

---

Early adopters and real‑world use cases​

Microsoft’s announcement highlights enterprise pilots and early adopters using Storage Discovery to accelerate operational tasks:

• Tesco is cited as using Storage Discovery in preview to build centralized reporting and reduce the time required to answer fundamental questions about data location and growth. (azure.microsoft.com)
• Willis Towers Watson appears in early reporting as an example of a customer that used discovery analytics to find and decommission unused storage accounts to drive cost savings, though this attribution stems from early industry summaries and should be validated by reader organizations before relying on it for procurement decisions.

Common scenarios where Storage Discovery delivers immediate value:

• FinOps: identify cold or redundant data, recommend access‑tier changes, and enable showback/chargeback reporting.
• Security: surface misconfigurations (unencrypted containers, stale public ACLs) and prioritize remediation.
• Platform engineering: detect rapid growth patterns that could signal runaway scripts, misconfigured ETL jobs, or unexpected data ingestion.
• Capacity planning: analyze seasonal peaks across 18 months of retention to inform lifecycle and performance investments.

---

Strengths: what Storage Discovery gets right​

• Scale and convenience: A managed, portal‑native service that can analyze extremely large estates reduces operational lift compared with home‑grown inventory systems. (azure.microsoft.com)
• Actionable cross‑tenant insights: Consolidated telemetry makes it far easier to spot outliers and systemic trends—critical for both cost control and security posture.
• Copilot democratization: Natural‑language access lowers the expertise barrier and accelerates time to insight for non‑technical stakeholders. (azure.microsoft.com)
• Rapid time‑to‑value: Workspaces populate within hours and include a historical backfill window so teams can start analysis immediately after deployment. (learn.microsoft.com)

---

Risks, limitations, and practical cautions​

While promising, Storage Discovery has several important caveats that organizations must consider before rolling it into production governance processes:

• Preview status — not GA: As a public preview, features, UI and guarantees may change. Microsoft does not provide production SLAs for preview services; critical compliance or audit processes should not depend solely on preview data.
• Regional availability: The preview is available in select regions only; global organizations must verify coverage for the regions where their storage lives. (learn.microsoft.com)
• Scope granularity: Each workspace supports a limited number of scopes (the documentation and preview UX suggest up to five named scopes per workspace in some descriptions), which may require multiple workspaces for highly federated estates. Plan workspace and scope layout in advance. (learn.microsoft.com)
• Data freshness and time lag: Changes in resources can take up to 24 hours to appear; hourly or real‑time operational checks should still rely on primary logging and monitoring tools. (learn.microsoft.com)
• Ecosystem lock‑in and multi‑cloud gaps: Storage Discovery focuses on Azure Blob Storage; organizations that need multi‑cloud inventory will either need parallel tools or a post‑processing layer to normalize multiple providers.
• Potential for over‑reliance on AI recommendations: Copilot helps accelerate discovery but should not replace governance review; natural language outputs need human validation before making sweeping configuration changes.
• Unknown future pricing impact: While preview access is free until September 30, 2025 and billing is slated to begin October 1, 2025, final priced rates and the long‑term cost model must be tested against real account and object counts for large estates. Budgeting without those figures could produce surprises. (learn.microsoft.com)

---

Implementation checklist — practical steps for pilots​

• Inventory current Blob Storage estate and identify representative subscriptions for your pilot.
• Confirm RBAC: ensure the user or service principal creating workspaces has Reader access for all workspaceRoots. (learn.microsoft.com)
• Design scopes using ARM tags and consistent tagging strategies to ensure accurate grouping.
• Start with a Standard trial during the preview window to validate hourly aggregates and 18‑month retention behavior.
• Validate key Copilot queries by cross‑checking Copilot answers against native logs (Azure Monitor, Storage analytics) before acting.
• Track ingestion and workspace object counts to produce early pricing sensitivity analysis once Microsoft posts retail rates.
• Document any gaps found (unsupported storage modes, delayed updates) and submit feedback to Microsoft during preview; your input can affect queuing and roadmap priorities. (azure.microsoft.com, learn.microsoft.com)

---

Competitive landscape and where Storage Discovery fits​

There are three broad classes of solutions addressing storage observability and FinOps:

• Native cloud offerings (the new Azure Storage Discovery, analogous features from other clouds) which provide deep provider integration and often better RBAC and portal UX.
• Third‑party platforms that consolidate multi‑cloud data and sometimes offer deeper anomaly detection or cross‑product correlation.
• Homegrown solutions (scripts + analytics pipelines) that offer maximal control but impose maintenance cost.

Azure Storage Discovery’s advantages are its native portal UX, scale claims, and Copilot integration. Organizations with an Azure‑first posture will likely find the service attractive for consolidation; multi‑cloud customers will need to weigh the tradeoff of native depth against cross‑cloud breadth. Early comparisons suggest Microsoft aims to carve differentiation through ease of onboarding, large retention windows in the Standard SKU, and conversational AI access. (tokawa-ms.github.io)

---

Roadmap signals and what to watch next​

Microsoft has not published a detailed public roadmap beyond the preview announcements, but reasonable expectations and signals include:

• Expanded regional coverage and a move from preview to general availability with production SLAs.
• Broader coverage beyond Blob Storage (Files, Queues, Tables) to provide more holistic storage analytics.
• Deeper automation with remediation playbooks or integrations into Azure Logic Apps and Functions for automated lifecycle actions.
• Enhancements to Copilot’s capabilities to propose and optionally execute safe, auditable remediations (subject to enterprise guardrails).
• Finalized pricing tiers and published rate cards, including volume discounts and enterprise commitments. (azure.microsoft.com)

---

Final analysis: where Storage Discovery is most valuable — and when to wait​

Azure Storage Discovery is a substantial addition to the Azure management portfolio for teams that need tenant‑wide observability of Blob Storage. Its combination of scale, historical retention, and natural‑language access tackles enduring pain points in FinOps, security, and platform engineering.
For many Azure‑centric enterprises, the service will accelerate identification of cost waste, reduce time spent on manual inventories, and improve security visibility. For organizations that are highly regulated, multi‑cloud, or managing immutable audit requirements, the service should be validated against compliance obligations and integrated into existing governance controls before being treated as a single source of truth.
Key takeaways:

• Try it early, but don’t rely on preview data for compliance or billing — preview is free through September 30, 2025 and billing starts October 1, 2025; test workloads in non‑production first. (learn.microsoft.com, azure.microsoft.com)
• Design your workspace and scope architecture in advance to avoid surprises around scope limits and the need for multiple workspaces. (learn.microsoft.com)
• Use Copilot to accelerate discovery, not as an unquestionable authority; validate important findings with raw telemetry and governance processes.
• Monitor region availability and published pricing before scaling Storage Discovery into a global production deployment. (learn.microsoft.com)

Azure Storage Discovery represents a shift from piecemeal storage housekeeping to a managed, analytics‑driven approach. For cloud teams looking to tame data sprawl, align FinOps, and harden storage security, it promises fast wins—but its preview status and forthcoming pricing mean careful evaluation remains essential. (azure.microsoft.com, learn.microsoft.com)

---

Azure Storage Discovery’s public preview is available now in select regions; administrators and FinOps teams should plan pilot runs, validate Copilot outputs against primary telemetry, and prepare for billing changes after October 1, 2025. (azure.microsoft.com, learn.microsoft.com)

---

Source: infoq.com Microsoft Azure Storage Discovery Enters Preview with Enhanced Blob Storage Analytics