Add lifecycle_management_policy details for storage account. Closes #146

 (#155)

azure/table_azure_storage_account.go

@@ -345,6 +345,13 @@ func tableAzureStorageAccount(_ context.Context) *plugin.Table {
 				Type:        proto.ColumnType_JSON,
 				Transform:   transform.FromField("Account.AccountProperties.Encryption.Services"),
 			},
+			{
+				Name:        "lifecycle_management_policy",
+				Description: "The managementpolicy associated with the specified storage account.",
+				Type:        proto.ColumnType_JSON,
+				Hydrate:     getAzureStorageAccountLifecycleManagementPolicy,
+				Transform:   transform.FromValue(),
+			},
 			{
 				Name:        "network_ip_rules",
 				Description: "A list of IP ACL rules.",
@@ -364,7 +371,7 @@ func tableAzureStorageAccount(_ context.Context) *plugin.Table {
 				Transform:   transform.FromField("Account.AccountProperties.NetworkRuleSet.VirtualNetworkRules"),
 			},
 
-			// Standard columns
+			// Steampipe standard columns
 			{
 				Name:        "title",
 				Description: ColumnDescriptionTitle,
@@ -383,6 +390,8 @@ func tableAzureStorageAccount(_ context.Context) *plugin.Table {
 				Type:        proto.ColumnType_JSON,
 				Transform:   transform.FromField("Account.ID").Transform(idToAkas),
 			},
+
+			// Azure standard columns
 			{
 				Name:        "region",
 				Description: ColumnDescriptionRegion,
@@ -459,6 +468,44 @@ func getStorageAccount(ctx context.Context, d *plugin.QueryData, h *plugin.Hydra
 	return &storageAccountInfo{op, op.Name, &resourceGroup}, nil
 }
 
+func getAzureStorageAccountLifecycleManagementPolicy(ctx context.Context, d *plugin.QueryData, h *plugin.HydrateData) (interface{}, error) {
+	accountData := h.Item.(*storageAccountInfo)
+
+	session, err := GetNewSession(ctx, d, "MANAGEMENT")
+	if err != nil {
+		return nil, err
+	}
+	subscriptionID := session.SubscriptionID
+
+	storageClient := storage.NewManagementPoliciesClient(subscriptionID)
+	storageClient.Authorizer = session.Authorizer
+
+	op, err := storageClient.Get(ctx, *accountData.ResourceGroup, *accountData.Name)
+	if err != nil {
+		if strings.Contains(err.Error(), "ManagementPolicyNotFound") {
+			return nil, nil
+		}
+		return nil, err
+	}
+
+	// Direct assignment returns ManagementPolicyProperties only
+	objectMap := make(map[string]interface{})
+	if op.ID != nil {
+		objectMap["id"] = op.ID
+	}
+	if op.Name != nil {
+		objectMap["name"] = op.Name
+	}
+	if op.Type != nil {
+		objectMap["type"] = op.Type
+	}
+	if op.ManagementPolicyProperties != nil {
+		objectMap["properties"] = op.ManagementPolicyProperties
+	}
+
+	return objectMap, nil
+}
+
 func getAzureStorageAccountBlobProperties(ctx context.Context, d *plugin.QueryData, h *plugin.HydrateData) (interface{}, error) {
 	accountData := h.Item.(*storageAccountInfo)
 

docs/tables/azure_storage_account.md

@@ -105,3 +105,16 @@ where
   and queue_logging_read
   and queue_logging_write;
 ```
+
+
+### List storage accounts without lifecycle
+
+```sql
+select
+  name,
+  lifecycle_management_policy -> 'properties' -> 'policy' -> 'rules' as lifecycle_rules
+from
+  azure_storage_account
+where
+  lifecycle_management_policy -> 'properties' -> 'policy' -> 'rules' is null;
+```