🛡️ Azure Storage Account has no transactions or stored data🟢

• Contextual name: 🛡️ Storage Account has no transactions or stored data🟢
• ID: /ce/ca/azure/storage/account-has-no-transactions-or-stored-data
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: BEST_PRACTICE
• Policy Categories: COST

Stats

not available

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 Azure Storage Account
  • 🔌 Azure Storage Account - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

Review Azure Storage Accounts that have not processed transactions and have not stored data during the last 30 days. The policy evaluates the 30-day sum of the Transactions metric and the 30-day average of the Used Capacity metric.

Rationale

An unused storage account can still create management overhead and may incur charges for account-level features, such as private endpoints, diagnostic settings, or retained service data. Reviewing accounts with no observed activity or capacity helps identify resources that can be retired after their business and technical dependencies have been verified.

Impact

Storage accounts identified by this policy are candidates for decommissioning. Removing confirmed unused accounts reduces management overhead and costs associated with attached services.

Before deletion, follow the normal change-management process to confirm ownership, application dependencies, and retention or disaster-recovery requirements. Deleting a storage account permanently removes its data and can interrupt dependent workloads.

... see more

Remediation

Open File

Remediation

Before Deleting the Storage Account

Confirm that the account is no longer required before deleting it:

1. Verify that the Transactions and Used Capacity metrics have both remained at zero for the last 30 days.
2. Identify the account owner and confirm that no application, infrastructure template, private endpoint, diagnostic setting, backup, disaster-recovery process, or data-retention requirement depends on the account.
3. Check for legal holds, immutability policies, and organizational retention requirements.
4. Export or back up any information that must be retained.

From Azure Portal

1. In the Azure portal, open the storage account.
2. Select Overview.
3. Select Delete.
4. Enter the storage account name to confirm the deletion, then select Delete.

From Azure CLI

Replace the information within {{}} with the appropriate values:

az storage account delete \
    --name {{storage-account-name}} \
    --resource-group {{resource-group-name}} \
    --yes

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 Cloudaware Framework → 💼 Waste Reduction			30		no data