SFTP Feature Enabled on Azure Storage Account Without Usage

Balazs Engedi

Service Category

Storage

Cloud Provider

Azure

Service Name

Azure Storage Account

Inefficiency Type

Inefficient Configuration

Explanation

Azure users may enable the SFTP feature on Storage Accounts during migration tests, integration scenarios, or experimentation. However, if left enabled after initial use, the feature continues to generate flat hourly charges — even when no SFTP traffic occurs.

Because this fee is incurred silently and independently of storage usage, it often goes unnoticed in cost reviews. When SFTP is not actively used for data ingestion or export, disabling it can eliminate unnecessary charges without impacting other access methods.

Relevant Billing Model

SFTP support on Azure Storage Accounts is billed at a **flat hourly rate**, regardless of actual usage
Pricing is approximately **$0.30/hour per account** (\~$219/month)
Charges begin as soon as SFTP is enabled and continue until explicitly disabled
No data transfer or connection usage is required for the fee to apply

Detection

Identify Storage Accounts with the SFTP feature enabled
Check activity logs or metrics to determine whether SFTP sessions are active or recent
Verify with application owners whether SFTP is still in use or required
Flag accounts with enabled SFTP and no recent activity as candidates for review

Remediation

Disable the SFTP feature on any Storage Account where it is no longer needed
Coordinate with owners to confirm that alternate access methods (e.g., HTTPS, SDK) are sufficient
Consider including SFTP enablement in governance reviews to catch idle services before they accumulate charges

Relevant Documentation

Submit Feedback