How to Migrate from Azure Blob Storage to Amazon S3 Using Agentless AWS DataSync

This article provides a comprehensive guide for migrating data from Azure Blob Storage to Amazon S3 using AWS DataSync in agentless Enhanced mode, eliminating the need for VM deployment or agent management.

• DataSync Enhanced mode enables agentless HTTPS transfers directly from Azure Blob to S3
• Key migration benefits: reduce cross-cloud egress costs, unlock AWS ecosystem integration, simplify operations
• Generate container-scoped SAS tokens in Azure with Read and List permissions
• Store SAS tokens securely in AWS Secrets Manager, never in plain text
• Create IAM role with least-privilege permissions for Secrets Manager, S3, and CloudWatch Logs
• Configure Azure Blob source location and S3 destination location in DataSync
• Set task mode to Enhanced, verify mode to "Only files transferred", overwrite to "Always"
• Monitor transfer progress via DataSync task history and CloudWatch Logs
• Post-migration: unlock Athena analytics, SageMaker ML, Lambda triggers, S3 Glacier archival
• Limitations: no folder-level SAS access, no user delegation tokens, 5TB object size limit

This guide enables organizations to consolidate storage on AWS, reduce operational overhead, and access native AWS analytics and ML services without cross-cloud data transfer costs.