How to list soft-delete configuration of blob storage using Kusto

Question

How to list soft-delete configuration of blob storage using Kusto

Joakim Westin 21

We have a large number of storage accounts, we want to have a list where we can see the storage accounts and also if the blob service has been configured for soft-delete.

Listing the accounts isn't a problem: resources | where type == "microsoft.storage/storageaccounts" | project id,properties.accessTier, properties.allowSharedKeyAccess, tags.Environment, tags.["Application Family"]

The challenge is how to access the property containerDeleteRetentionPolicy of the type Microsoft.Storage/storageAccounts/blobServices.

I've tried many ways, I've Googled... but no luck so far.

So if anyone has a good example of how to list properties of the blobServices using KUSTO type I'd be very grateful!

Sumarigo-MSFT 47,466 Reputation points Microsoft Employee Moderator

2023-01-30T16:07:51.16+00:00

@Joakim Westin Just checking in to see if the below answer helped. If this answers your query, do click "Accept the answer”, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Accepted answer

0 additional answers

Your answer

Sumarigo-MSFT 47,466 Reputation points Microsoft Employee Moderator

2023-01-30T16:07:51.16+00:00

@Joakim Westin Just checking in to see if the below answer helped. If this answers your query, do click "Accept the answer”, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Alistair Ross 7,466 Microsoft Employee

Hi @Joakim Westin

Unfortunately the answer is you cannot.

Azure Resource Graph performs API calls for each resource, but not the child resources (which a blob is in this case). Effectively it is running the follow API call and storing the results.

GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Storage/storageAccounts?api-version=2022-09-01

https://learn.microsoft.com/en-us/rest/api/storagerp/storage-accounts/list?tabs=HTTP

In this instance you need to call the following API against each storage account

GET https://management.azure.com/subscriptions/{subscription-id}/resourceGroups/res4410/providers/Microsoft.Storage/storageAccounts/sto8607/blobServices?api-version=2022-09-01

https://learn.microsoft.com/en-us/rest/api/storagerp/blob-services/list?tabs=HTTP

Or using PowerShell

Get-AzStorageAccount  | Get-AzStorageBlobServiceProperty | Select StorageAccountName -ExpandProperty ContainerDeleteRetentionPolicy

Sorry it isn't the answer you are looking for. If you need it available in Resource Graph Explorer, then I encourage you to submit feedback here https://feedback.azure.com/d365community/forum/675ae472-f324-ec11-b6e6-000d3a4f0da0

kind regards

Alistair

SaiKishor-MSFT 17,336 Reputation points

2023-01-12T00:14:40.81+00:00

@Joakim Westin I am reaching out to see if you have any further questions. If so, please let us know and we will be glad to assist further. If the below answer was helpful, please make sure to Accept it as answer as it helps other members in the community. Thank you!
Joakim Westin 21 Reputation points

2023-01-30T16:06:34.8333333+00:00

Ok, thanks for the prompt and clear reply @Alistair Ross - then we'll have to use PowerShell for now.

Kind regards, Joakim
Joakim Westin 21 Reputation points

2023-01-30T16:06:56.67+00:00

Ok, thanks for the prompt and clear reply @Alistair Ross - then we'll have to use PowerShell for now.

Kind regards, Joakim

Share via

How to list soft-delete configuration of blob storage using Kusto

0 additional answers

Your answer