The StorageContainer entity (AZStorageContainer) represents a blob container inside an Azure Storage Account. Forestall collects containers as resources in their own right. Their anonymous access level, immutability and encryption settings can be queried, and a role assignment scoped to a single container is resolved to that container.
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used by Forestall to identify the object. |
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier of the object in Forestall, a combination of the selected scan’s GUID and the object’s own identifier. |
| Name | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Name of the blob container. |
| PublicAccess | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Anonymous access level of the container: None (private), Blob (anonymous read of blobs) or Container (anonymous read and listing). Overridden when the storage account disallows blob public access. |
| LeaseStatus | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Whether the container has an active lease (locked / unlocked). |
| LeaseState | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Lease state of the container: available, leased, expired, breaking or broken. |
| LastModifiedTime | DATE | SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY | Date and time the container or its properties were last modified. Blob operations do not change it. |
| HasImmutabilityPolicy | BOOLEAN | N/A (toggle) | Whether the container has a time-based immutability (WORM) policy. |
| HasLegalHold | BOOLEAN | N/A (toggle) | Whether a legal hold is in effect: blobs can be created and read but not modified or deleted. |
| DefaultEncryptionScope | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Default encryption scope for blobs uploaded to the container. |
| DenyEncryptionScopeOverride | BOOLEAN | N/A (toggle) | Whether uploads are prevented from using an encryption scope other than the default. |