Azure migration · field note
Moving from Azure UAE North to Saudi Arabia East: What to Check First
The difficult part is often the period when some systems have moved and others have not. Plan that temporary setup as carefully as the final one.
Your Saudi customers use an application hosted in UAE North. With Saudi Arabia East approaching, the obvious question is whether you can move it closer. The less obvious question is what happens to everything connected to it.
A regional migration involves resources, data, connections, and operating procedures. It is rarely a single change in the Azure portal. Start by defining the application you are moving, including its less visible dependencies.
01 / Define the unit of work
Move an application, not an unexplained list of resources
One Azure subscription can contain resources in several regions. Changing its billing details, or moving a resource between resource groups, does not relocate the underlying application to Saudi Arabia.
Instead, draw a boundary around the workload. Include the web application, database, uploaded files, queues, scheduled jobs, identity configuration, secrets, monitoring, and recovery arrangements.
Give each part a decision: redeploy in the target, migrate data, keep an approved dependency elsewhere, replace, or retire. Record who owns each decision. This is also the point to notice unused resources that should not be moved at all.
Define the outcome in business terms. Which users will be served from Saudi Arabia, what performance is expected, and which data-location commitments must the design satisfy?
02 / Choose supported methods
Use a migration method that fits each service
For some resources, Azure Resource Mover can help coordinate a regional move and identify dependencies. Its support is specific: Microsoft lists supported VM, networking, and Azure SQL resource types, with limits. Check the current matrix and target-region support before choosing it.
Other components may be better recreated from deployment templates and application pipelines. Databases and stored files then need their own migration or replication procedure.
- Application code: prove that the same release can be deployed into a clean environment.
- Database: select a supported copy or replication method and test consistency after the move.
- Files: plan the initial copy and how later changes will reach the target.
- Jobs and integrations: decide which side runs them during each stage.
Read the Resource Mover overview as a tool guide, then build the wider application runbook around it. A resource move completing successfully is only one part of application acceptance.
03 / Rebuild the paths
Check DNS, private access, and external allowlists
Networking changes can break a migration even when the application code and data are correct. Review address ranges, routing, private endpoints, DNS resolution, firewall rules, and connectivity to offices or other environments.
Microsoft states that public IP addresses are not retained across regions in Resource Mover moves. Review every partner system that allows access only from the old public or outbound addresses.
Also check certificate bindings, custom domains, sign-in redirect addresses, and secrets containing service endpoints. An application can display its home page while file uploads or payment callbacks fail because one address was overlooked.
Test from the places that matter: a Saudi user connection, your office network, a build agent, and any integration partner that can help with testing. A successful request from one developer's laptop does not cover all those paths.
04 / Preserve correct data
Plan the last writes as carefully as the first copy
The initial data copy may take hours or days depending on volume and the chosen method. During that time, the source may continue changing. Decide how you will capture those changes and how much interruption the final switch can tolerate.
For a simple application, a planned write pause may be acceptable. A busier system might need continuous replication and a controlled final synchronisation. The method must be supported by the actual service and application design.
Define checks for correctness. Compare important totals, record counts, file availability, and a sample of complete business transactions. Row counts alone will not detect every reporting or relationship error.
For an illustrative order-processing system, check that an order, its payment state, uploaded documents, and downstream job all agree after the move. This is a test scenario, not a claim about a completed Saudi migration.
05 / The temporary architecture
Test what happens while the system spans two regions
Moving in stages can reduce the size of each change. It also creates a period when some components run in UAE North and others run in Saudi Arabia East.
Test synchronous calls across that boundary. A page that makes many database calls can feel slower even if each extra network delay looks small. Batch transfers and background jobs may tolerate the same distance more easily.
Review the data transferred and the charges it may create. A Saudi application using a UAE database still has a cross-border data path. The application server's location does not remove that fact.
For tightly connected components, moving them together may be simpler. For independent services, a phased move may work well. Make that decision from the dependency map and measurements rather than an arbitrary rule such as moving all servers before all databases.
06 / The traffic switch
Write the cutover and rollback procedure
A useful runbook names each action, who performs it, how success is checked, and the condition that stops the next step. Rehearse it before the production window.
- Confirm the target deployment, monitoring, capacity, and latest recovery point.
- Apply the agreed write pause or final synchronisation procedure.
- Disable or move scheduled jobs so the two environments do not process the same work.
- Switch traffic and validate representative user actions.
- Watch errors, response times, integration results, and data correctness.
Rollback needs a data decision. If the target has accepted new writes, switching traffic back to the old database may lose or split those transactions. Define how to preserve or reconcile them, and when a forward repair is safer than a return.
Keep the business decision maker available during the window. A technical team should not have to guess whether a particular interruption is acceptable.
07 / Finish the move
Close the old environment deliberately
After acceptance, agree how long the source must remain available. Keep retained data and backups according to the approved requirements, and remove unneeded compute, networking, credentials, and integration paths when it is safe.
Check the bill after retirement. Stopping an application does not necessarily remove its disks, backups, IP charges, or commitments. Update ownership and support documentation so the old region does not remain an invisible dependency.
Before this stage, use the Saudi backup and recovery guide to verify the new protection. A finished migration should leave the team able to deploy, diagnose, and restore the application in its new home.
Primary references
Sources and further reading
Questions teams ask
Frequently asked questions
Can I change an Azure subscription's region to move all its resources?
No. Resources within one subscription can run in different regions. You need to move or redeploy each regional service using its supported method. Changing billing details or resource group metadata does not relocate an application.
Can Azure Resource Mover handle the entire migration?
It supports specific resource types, including certain VM, networking, and Azure SQL resources. Check its current support matrix, source and target regions, and workload limitations. Other services need separate migration or redeployment methods.
Will public IP addresses stay the same?
Do not assume that they will. Microsoft states that public IP addresses are not retained across regions in Resource Mover moves. Review DNS, certificates, outbound addresses, and partner allowlists as part of the migration.
Can the move happen without downtime?
Some architectures can reduce downtime with replication and controlled traffic switching. The achievable interruption depends on the services, data consistency, application design, and tested procedure. Avoid promising zero downtime before rehearsal.