Azure Cost Management
A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
2,754 questions
All my resources within my resource group just went missing
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 21%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Sven Deha
0
Reputation points
I'm testing some stuff within my Visual Studio Enterprise subscription and created a resource group with quite a lot of resources (SQL DB, SQL Server, Azure Function app, Application Insights..). However, today I noticed that now all of these resources are not available anymore. It seems they all got deleted somehow even though I didnt't touch them.. My visual studio subscription name has also been changed slightly to "Playground - WGD". I'm baffled on how this is even possible..
{count} votes
-
Erland Sommarskog 112.8K Reputation points MVP2024-11-21T22:17:21.1866667+00:00 Looks like you have green men in your Azure subscription!
Go to the Activity Log of your subscription to get a better idea of what might have happened.
If you have the subscription id of your VS subscription saved somewhere, compare it to the current.
-
Sven Deha 0 Reputation points
2024-11-21T23:05:48.9433333+00:00 I checked the logs and indeed someone that was created in 2019 seems to have access to my personal visual studio subscription and started deleting all my resources.. I never invited this person nor do I know this person. Any ideas on this?
-
Oury Ba-MSFT 19,571 Reputation points Microsoft Employee2024-11-22T00:24:46.3666667+00:00 @Sven Deha Thank you for reaching out and sorry to hear about this issue.
In addition to @Erland Sommarskog comment above. You can go to your subscription where the deleted resources were residing and go to IAM access control and remove any users from your subscription that you do not recognize or did not authorize. You can also enable MFA for your account to add an extra layer of security.
For the deleted resources, if you have ARM templates or script used to deploy the resources, you can redeploy them.
Sign in to comment
Sign in to answer