azure - 查找未使用的存储帐户 azure ARM

Question

我的订阅已达到 250 个存储帐户的硬上限。存储帐户是使用 ARM 创建的

我需要一种方法来查找未使用的存储帐户并将其删除。基本上，我想找到 90 天内未访问过的容器的存储帐户并进行清理。

有没有办法检查上次访问时间或使用 PowerShell 或最好是 azure cli 进行清理的更好方法

谢谢

Answer 1

您可以做的是从 LastModified 属性获取最近修改的容器，然后检查该时间戳是否小于当前日期减去 90 天。我们需要检查容器级别和 blob 级别的 LastModified 属性。

# Set current context to subscription
Set-AzContext -SubscriptionId "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

# Go through every storage account in your subscription
foreach ($storageAccount in Get-AzStorageAccount) {
    $storageAccountName = $storageAccount.StorageAccountName
    $resourceGroupName = $storageAccount.ResourceGroupName

    # Get key1 storage account key
    $storageAccountKey = (Get-AzStorageAccountKey -Name $storageAccountName -ResourceGroupName $resourceGroupName).Value[0]

    # Create storage account context using above key
    $context = New-AzStorageContext -StorageAccountName $storageAccountName -StorageAccountKey $storageAccountKey

    # fetch all containers
    $containers = Get-AzStorageContainer -Context $context

    $deleteStorageAccount = $false
    foreach ($container in $containers) {

        # First check if container has been modified
        if ($container.LastModified.DateTime -lt (Get-Date).AddDays(-90)) {
            $deleteStorageAccount = $true
            break
        }

        # Get all blobs from container, including deleted blobs
        $blobs = Get-AzStorageBlob -Container $container.Name -Context $context -IncludeDeleted

        # Then check each blob in container
        foreach ($blob in $blobs) {
            if ($blob.LastModified.DateTime -lt (Get-Date).AddDays(-90)) {
                $deleteStorageAccount = $true
                break
            }
        }
    }

    # If this flag is set, storage account has been acccessed in last 90 days
    if ($deleteStorageAccount) {
        Remove-AzStorageAccount -Name $storageAccountName -ResourceGroupName $resourceGroupName -Force -WhatIf
    }
}

由于此操作可能极其有害，因此您可以使用 -WhatIf 运行 Remove-AzStorageAccount 来查看将删除哪些存储帐户，然后再真正删除它们。