Azure Storage · Azure Cost · microsoft/azure-skills · Skills Docs

Azure Storage · Azure Cost · microsoft/azure-skills · Skills Docs

Input Type	Example	Use Case
Subscription ID	`a1b2c3d4-...`	Analyze specific subscription
Subscription Name	`Production-Environment`	User-friendly identifier
Subscription Prefix	`StorageTeam -`	Analyze all team subscriptions
Tenant ID	`tenant-guid`	Analyze entire organization
“All my subscriptions”	(keyword)	Scan all accessible subscriptions

Priority	Rule	Detection Logic	Recommendation	Avg Savings
🔴 Critical	Orphaned Managed Disks (Compute)	Managed disks with `managedBy` empty (billed as storage)	Delete or snapshot and delete	$20-500/mo
🔴 Critical	Premium in Dev	`sku.name` contains `Premium` AND `tags.environment in ['dev','test','staging']`	Downgrade to Standard	$50-400/mo
🟠 High	No Lifecycle Policy	Blob service has no lifecycle management rules configured	Add tiering/deletion rules	$50-300/mo
🟠 High	Hot-Only with Infrequent Access	>80% of blobs unaccessed for 30+ days AND all in Hot tier	Move to Cool or enable auto-tiering	$30-200/mo
🟠 High	GRS in Non-Production	`sku.name` contains `GRS` or `GZRS` AND `tags.environment in ['dev','test']`	Downgrade to LRS or ZRS	$40-300/mo
🟠 High	Classic Storage Accounts	`kind == 'Storage'` (classic/v1)	Upgrade to StorageV2 for tiering support	Variable
🟡 Medium	Large Snapshots	Snapshot cost exceeds 20% of base blob cost	Review snapshot retention policy	$20-100/mo
🟡 Medium	Soft Delete Retention >30 days	`deleteRetentionPolicy.days > 30`	Reduce to 7-14 days unless compliance requires it	$10-50/mo
🟡 Medium	No Access Tier Set	Blobs using default Hot when Cool would suffice	Set explicit Cool or Cold tier	$20-100/mo
🟡 Medium	Unused Containers	Containers with zero blobs or zero access for 90+ days	Delete or archive contents	$5-50/mo
🟢 Low	Untagged Storage Account	Missing required tags (`environment`, `owner`, `costCenter`)	Apply tags for cost allocation	N/A
🟢 Low	Old Storage Account	Age >365 days without review	Verify still needed	Variable
🟢 Low	Version-Heavy Blobs	Blob versioning enabled with >50 versions per blob	Add version deletion lifecycle rule	$5-30/mo

{
  "rules": [
    {
      "name": "move-to-cool-after-30-days",
      "type": "Lifecycle",
      "definition": {
        "actions": {
          "baseBlob": {
            "tierToCool": { "daysAfterLastAccessTimeGreaterThan": 30 }
          }
        },
        "filters": { "blobTypes": ["blockBlob"], "prefixMatch": [] }
      }
    },
    {
      "name": "move-to-archive-after-180-days",
      "type": "Lifecycle",
      "definition": {
        "actions": {
          "baseBlob": {
            "tierToArchive": { "daysAfterLastAccessTimeGreaterThan": 180 }
          }
        },
        "filters": { "blobTypes": ["blockBlob"], "prefixMatch": [] }
      }
    },
    {
      "name": "delete-old-snapshots",
      "type": "Lifecycle",
      "definition": {
        "actions": {
          "snapshot": {
            "delete": { "daysAfterCreationGreaterThan": 90 }
          }
        },
        "filters": { "blobTypes": ["blockBlob"] }
      }
    },
    {
      "name": "delete-old-versions",
      "type": "Lifecycle",
      "definition": {
        "actions": {
          "version": {
            "delete": { "daysAfterCreationGreaterThan": 90 }
          }
        },
        "filters": { "blobTypes": ["blockBlob"] }
      }
    }
  ]
}

Resources
| where type =~ 'microsoft.storage/storageaccounts'
| where sku.name contains 'Premium'
| where tags.environment in~ ('dev', 'test', 'staging', 'sandbox')
| project name, resourceGroup, sku=sku.name, tags

Resources
| where type =~ 'microsoft.storage/storageaccounts'
| where sku.name contains 'GRS' or sku.name contains 'GZRS'
| where tags.environment in~ ('dev', 'test', 'staging')
| project name, resourceGroup, sku=sku.name, location, tags