Audit Terraform-provisioned storage accounts — what are they actually for? #151

Problem

Terraform in infra/terraform-{dev,test,staging,prod}/main.tf provisions storage-account-shaped resources, but no Python code in the app uses Azure Blob Storage. grep -r "azure-storage" across *.py, *.txt, *.toml returns zero hits.

Found during #68 investigation (closed 2026-11-02).

What to find out

For each environment's storage account:

• Is it in use by Terraform state backend (confirmed for prod: storage_account_name = "sttfstateprod7u8hql")?
• Is it in use by Container Apps logs, build artefacts, or other infra plumbing?
• Or is it vestigial from an earlier plan that never shipped?

Done when

• Each storage account's actual purpose is documented in the Terraform file next to its resource block (or above the module), OR removed from Terraform if unused
• A short note in docs/infra/ or an ADR explains the pattern
• No Terraform state file is pointing at a storage account that's then removed in the same PR

Related

• Decide: Azurite everywhere for local dev storage, or keep BYTEA/Blob split #68 (closed): confirmed no app code uses these accounts
• D4 decision record (DECISIONS/2026-11-02-file-storage-backend.md): BYTEA for file bodies