RELOPS-2009: Move cost exports to the related subscription directory

[markcor]

No description provided.

[markcor]

azure_fxci:

Terraform will perform the following actions:

  # azapi_resource.azure_infrasec_cost_export_actual will be destroyed
  # (because azapi_resource.azure_infrasec_cost_export_actual is not in configuration)
  - resource "azapi_resource" "azure_infrasec_cost_export_actual" {
      - body                      = {
          - properties = {
              - compressionMode = "None"
              - definition      = {
                  - dataSet   = {
                      - granularity = "Daily"
                    }
                  - timeframe = "MonthToDate"
                  - type      = "ActualCost"
                }
              - deliveryInfo    = {
                  - destination = {
                      - container      = "cost-management"
                      - resourceId     = "/subscriptions/108d46d5-fe9b-4850-9a7d-8c914aa6c1f0/resourceGroups/rg-azure-cost-mgmt/providers/Microsoft.Storage/storageAccounts/safinopsdata"
                      - rootFolderPath = "azure_infrasec_daily_actual"
                    }
                }
              - format          = "Csv"
              - partitionData   = true
              - schedule        = {
                  - recurrence       = "Daily"
                  - recurrencePeriod = {
                      - from = "2025-09-02T00:00:00Z"
                      - to   = "2050-02-01T00:00:00Z"
                    }
                  - status           = "Active"
                }
            }
        } -> null
      - id                        = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396/providers/Microsoft.CostManagement/exports/azure-infrasec_actual" -> null
      - ignore_casing             = false -> null
      - ignore_missing_property   = true -> null
      - ignore_null_property      = false -> null
      - name                      = "azure-infrasec_actual" -> null
      - output                    = {
          - id         = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396/providers/Microsoft.CostManagement/exports/azure-infrasec_actual"
          - properties = {
              - nextRunTimeEstimate = "2025-11-21T09:00:00Z"
            }
          - type       = "Microsoft.CostManagement/exports"
        } -> null
      - parent_id                 = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396" -> null
      - schema_validation_enabled = true -> null
      - sensitive_body            = (write-only attribute) -> null
      - type                      = "Microsoft.CostManagement/exports@2025-03-01" -> null
    }

  # azapi_resource.azure_infrasec_cost_export_amortized will be destroyed
  # (because azapi_resource.azure_infrasec_cost_export_amortized is not in configuration)
  - resource "azapi_resource" "azure_infrasec_cost_export_amortized" {
      - body                      = {
          - properties = {
              - compressionMode = "None"
              - definition      = {
                  - dataSet   = {
                      - granularity = "Daily"
                    }
                  - timeframe = "MonthToDate"
                  - type      = "AmortizedCost"
                }
              - deliveryInfo    = {
                  - destination = {
                      - container      = "cost-management"
                      - resourceId     = "/subscriptions/108d46d5-fe9b-4850-9a7d-8c914aa6c1f0/resourceGroups/rg-azure-cost-mgmt/providers/Microsoft.Storage/storageAccounts/safinopsdata"
                      - rootFolderPath = "azure_infrasec_daily_amortized"
                    }
                }
              - format          = "Csv"
              - partitionData   = true
              - schedule        = {
                  - recurrence       = "Daily"
                  - recurrencePeriod = {
                      - from = "2025-09-02T00:00:00Z"
                      - to   = "2050-02-01T00:00:00Z"
                    }
                  - status           = "Active"
                }
            }
        } -> null
      - id                        = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396/providers/Microsoft.CostManagement/exports/azure-infrasec_amortized" -> null
      - ignore_casing             = false -> null
      - ignore_missing_property   = true -> null
      - ignore_null_property      = false -> null
      - name                      = "azure-infrasec_amortized" -> null
      - output                    = {
          - id         = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396/providers/Microsoft.CostManagement/exports/azure-infrasec_amortized"
          - properties = {
              - nextRunTimeEstimate = "2025-11-21T09:00:00Z"
            }
          - type       = "Microsoft.CostManagement/exports"
        } -> null
      - parent_id                 = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396" -> null
      - schema_validation_enabled = true -> null
      - sensitive_body            = (write-only attribute) -> null
      - type                      = "Microsoft.CostManagement/exports@2025-03-01" -> null
    }

Plan: 0 to add, 0 to change, 2 to destroy.

These exports recreated below

azure_infrasec:

Terraform will perform the following actions:

  # azapi_resource.azure_infrasec_cost_export_actual will be created
  + resource "azapi_resource" "azure_infrasec_cost_export_actual" {
      + body                      = {
          + properties = {
              + compressionMode = "None"
              + definition      = {
                  + dataSet   = {
                      + granularity = "Daily"
                    }
                  + timeframe = "MonthToDate"
                  + type      = "ActualCost"
                }
              + deliveryInfo    = {
                  + destination = {
                      + container      = "cost-management"
                      + resourceId     = "/subscriptions/108d46d5-fe9b-4850-9a7d-8c914aa6c1f0/resourceGroups/rg-azure-cost-mgmt/providers/Microsoft.Storage/storageAccounts/safinopsdata"
                      + rootFolderPath = "azure_infrasec_daily_actual"
                    }
                }
              + format          = "Csv"
              + partitionData   = true
              + schedule        = {
                  + recurrence       = "Daily"
                  + recurrencePeriod = {
                      + from = "2025-09-02T00:00:00.000Z"
                      + to   = "2050-02-01T00:00:00.000Z"
                    }
                  + status           = "Active"
                }
            }
        }
      + id                        = (known after apply)
      + ignore_casing             = false
      + ignore_missing_property   = true
      + ignore_null_property      = false
      + name                      = "azure-infrasec_actual"
      + output                    = (known after apply)
      + parent_id                 = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396"
      + schema_validation_enabled = true
      + sensitive_body            = (write-only attribute)
      + type                      = "Microsoft.CostManagement/exports@2025-03-01"
    }

  # azapi_resource.azure_infrasec_cost_export_amortized will be created
  + resource "azapi_resource" "azure_infrasec_cost_export_amortized" {
      + body                      = {
          + properties = {
              + compressionMode = "None"
              + definition      = {
                  + dataSet   = {
                      + granularity = "Daily"
                    }
                  + timeframe = "MonthToDate"
                  + type      = "AmortizedCost"
                }
              + deliveryInfo    = {
                  + destination = {
                      + container      = "cost-management"
                      + resourceId     = "/subscriptions/108d46d5-fe9b-4850-9a7d-8c914aa6c1f0/resourceGroups/rg-azure-cost-mgmt/providers/Microsoft.Storage/storageAccounts/safinopsdata"
                      + rootFolderPath = "azure_infrasec_daily_amortized"
                    }
                }
              + format          = "Csv"
              + partitionData   = true
              + schedule        = {
                  + recurrence       = "Daily"
                  + recurrencePeriod = {
                      + from = "2025-09-02T00:00:00.000Z"
                      + to   = "2050-02-01T00:00:00.000Z"
                    }
                  + status           = "Active"
                }
            }
        }
      + id                        = (known after apply)
      + ignore_casing             = false
      + ignore_missing_property   = true
      + ignore_null_property      = false
      + name                      = "azure-infrasec_amortized"
      + output                    = (known after apply)
      + parent_id                 = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396"
      + schema_validation_enabled = true
      + sensitive_body            = (write-only attribute)
      + type                      = "Microsoft.CostManagement/exports@2025-03-01"
    }

  # module.wiz_azure_outpost.azuread_service_principal.wiz_da_scanner_sp will be updated in-place
  ~ resource "azuread_service_principal" "wiz_da_scanner_sp" {
        id                            = "/servicePrincipals/c9282fdc-d868-4fc2-bdaa-6d5c8d1b4d4c"
      ~ owners                        = [
          - "4e48c4fe-303d-4d1d-bd6f-76f39f7b1c08",
            # (5 unchanged elements hidden)
        ]
        tags                          = []
        # (23 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # module.wiz_azure_outpost.azurerm_key_vault.wiz_outpost_keyvault will be updated in-place
  ~ resource "azurerm_key_vault" "wiz_outpost_keyvault" {
      ~ access_policy                   = [
          ~ {
              ~ object_id               = "61d748fa-4254-4686-9a2a-db43814c0f7a" -> "cb79b99f-fdaa-4e0d-a2c8-c5841890fa74"
                # (6 unchanged attributes hidden)
            },
            {
                application_id          = null
                certificate_permissions = []
                key_permissions         = [
                    "Update",
                    "Create",
                    "List",
                    "Get",
                    "Delete",
                ]
                object_id               = "bc7a1764-1e44-48d6-8990-718a2be1ba34"
                secret_permissions      = [
                    "Set",
                    "List",
                    "Get",
                    "Delete",
                ]
                storage_permissions     = []
                tenant_id               = "c0dc8bb0-b616-427e-8217-9513964a145b"
            },
            {
                application_id          = null
                certificate_permissions = [
                    "Get",
                    "List",
                ]
                key_permissions         = [
                    "Get",
                    "List",
                    "Sign",
                ]
                object_id               = "db13138c-1278-438d-bb18-5c83aa4bc7b3"
                secret_permissions      = [
                    "Get",
                    "List",
                ]
                storage_permissions     = []
                tenant_id               = "c0dc8bb0-b616-427e-8217-9513964a145b"
            },
          - {
              - certificate_permissions = [
                  - "Get",
                  - "List",
                  - "Update",
                  - "Create",
                  - "Import",
                  - "Delete",
                  - "Recover",
                  - "Backup",
                  - "Restore",
                  - "ManageContacts",
                  - "ManageIssuers",
                  - "GetIssuers",
                  - "ListIssuers",
                  - "SetIssuers",
                  - "DeleteIssuers",
                  - "Purge",
                ]
              - key_permissions         = [
                  - "Get",
                  - "List",
                  - "Update",
                  - "Create",
                  - "Import",
                  - "Delete",
                  - "Recover",
                  - "Backup",
                  - "Restore",
                  - "GetRotationPolicy",
                  - "SetRotationPolicy",
                  - "Rotate",
                  - "Purge",
                  - "Release",
                  - "Encrypt",
                  - "Decrypt",
                  - "UnwrapKey",
                  - "WrapKey",
                  - "Verify",
                  - "Sign",
                ]
              - object_id               = "4e48c4fe-303d-4d1d-bd6f-76f39f7b1c08"
              - secret_permissions      = [
                  - "Get",
                  - "List",
                  - "Set",
                  - "Delete",
                  - "Recover",
                  - "Backup",
                  - "Restore",
                  - "Purge",
                ]
              - storage_permissions     = []
              - tenant_id               = "c0dc8bb0-b616-427e-8217-9513964a145b"
                # (1 unchanged attribute hidden)
            },
        ]
        id                              = "/subscriptions/9b9774fb-67f1-45b7-830f-aafe07a94396/resourceGroups/rg-wiz-global-orchestrator/providers/Microsoft.KeyVault/vaults/kv-wiz-moz"
        name                            = "kv-wiz-moz"
        tags                            = {
            "wiz" = null
        }
        # (13 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 2 to add, 2 to change, 0 to destroy.

Includes ownership change to relops sg group.
azure_0DIN:

Terraform will perform the following actions:

  # azapi_resource.azure_zero_din_cost_export_actual will be updated in-place
  ~ resource "azapi_resource" "azure_zero_din_cost_export_actual" {
      ~ body                      = {
          ~ properties = {
              ~ schedule        = {
                  ~ recurrencePeriod = {
                      ~ from = "2025-10-07T00:00:00Z" -> "2025-09-02T00:00:00.000Z"
                      ~ to   = "2050-02-01T00:00:00Z" -> "2050-02-01T00:00:00.000Z"
                    }
                    # (2 unchanged attributes hidden)
                }
                # (5 unchanged attributes hidden)
            }
        }
        id                        = "/subscriptions/e1cb04e4-3788-471a-881f-385e66ad80ab/providers/Microsoft.CostManagement/exports/azure_0din_actual"
        name                      = "azure_0din_actual"
      ~ output                    = {
          - id         = "/subscriptions/e1cb04e4-3788-471a-881f-385e66ad80ab/providers/Microsoft.CostManagement/exports/azure_0din_actual"
          - properties = {
              - nextRunTimeEstimate = "2025-11-21T09:00:00Z"
            }
          - type       = "Microsoft.CostManagement/exports"
        } -> (known after apply)
        # (7 unchanged attributes hidden)
    }

  # azapi_resource.azure_zero_din_cost_export_amortized will be updated in-place
  ~ resource "azapi_resource" "azure_zero_din_cost_export_amortized" {
      ~ body                      = {
          ~ properties = {
              ~ schedule        = {
                  ~ recurrencePeriod = {
                      ~ from = "2025-10-07T00:00:00Z" -> "2025-09-02T00:00:00.000Z"
                      ~ to   = "2050-02-01T00:00:00Z" -> "2050-02-01T00:00:00.000Z"
                    }
                    # (2 unchanged attributes hidden)
                }
                # (5 unchanged attributes hidden)
            }
        }
        id                        = "/subscriptions/e1cb04e4-3788-471a-881f-385e66ad80ab/providers/Microsoft.CostManagement/exports/azure_0din_amortized"
        name                      = "azure_0din_amortized"
      ~ output                    = {
          - id         = "/subscriptions/e1cb04e4-3788-471a-881f-385e66ad80ab/providers/Microsoft.CostManagement/exports/azure_0din_amortized"
          - properties = {
              - nextRunTimeEstimate = "2025-11-21T09:00:00Z"
            }
          - type       = "Microsoft.CostManagement/exports"
        } -> (known after apply)
        # (7 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

Updates existing exports to be consistent with other subs.

azure_tceng

Terraform will perform the following actions:

  # azapi_resource.azure_tceng_cost_export_actual will be created
  + resource "azapi_resource" "azure_tceng_cost_export_actual" {
      + body                      = {
          + properties = {
              + compressionMode = "None"
              + definition      = {
                  + dataSet   = {
                      + granularity = "Daily"
                    }
                  + timeframe = "MonthToDate"
                  + type      = "ActualCost"
                }
              + deliveryInfo    = {
                  + destination = {
                      + container      = "cost-management"
                      + resourceId     = "/subscriptions/108d46d5-fe9b-4850-9a7d-8c914aa6c1f0/resourceGroups/rg-azure-cost-mgmt/providers/Microsoft.Storage/storageAccounts/safinopsdata"
                      + rootFolderPath = "azure_tceng_daily_actual"
                    }
                }
              + format          = "Csv"
              + partitionData   = true
              + schedule        = {
                  + recurrence       = "Daily"
                  + recurrencePeriod = {
                      + from = "2025-09-02T00:00:00.000Z"
                      + to   = "2050-02-01T00:00:00.000Z"
                    }
                  + status           = "Active"
                }
            }
        }
      + id                        = (known after apply)
      + ignore_casing             = false
      + ignore_missing_property   = true
      + ignore_null_property      = false
      + name                      = "azure-tceng_actual"
      + output                    = (known after apply)
      + parent_id                 = "/subscriptions/8a205152-b25a-417f-a676-80465535a6c9"
      + schema_validation_enabled = true
      + sensitive_body            = (write-only attribute)
      + type                      = "Microsoft.CostManagement/exports@2025-03-01"
    }

  # azapi_resource.azure_tceng_cost_export_amortized will be created
  + resource "azapi_resource" "azure_tceng_cost_export_amortized" {
      + body                      = {
          + properties = {
              + compressionMode = "None"
              + definition      = {
                  + dataSet   = {
                      + granularity = "Daily"
                    }
                  + timeframe = "MonthToDate"
                  + type      = "AmortizedCost"
                }
              + deliveryInfo    = {
                  + destination = {
                      + container      = "cost-management"
                      + resourceId     = "/subscriptions/108d46d5-fe9b-4850-9a7d-8c914aa6c1f0/resourceGroups/rg-azure-cost-mgmt/providers/Microsoft.Storage/storageAccounts/safinopsdata"
                      + rootFolderPath = "azure_tceng_daily_amortized"
                    }
                }
              + format          = "Csv"
              + partitionData   = true
              + schedule        = {
                  + recurrence       = "Daily"
                  + recurrencePeriod = {
                      + from = "2025-09-02T00:00:00.000Z"
                      + to   = "2050-02-01T00:00:00.000Z"
                    }
                  + status           = "Active"
                }
            }
        }
      + id                        = (known after apply)
      + ignore_casing             = false
      + ignore_missing_property   = true
      + ignore_null_property      = false
      + name                      = "azure-tceng_amortized"
      + output                    = (known after apply)
      + parent_id                 = "/subscriptions/8a205152-b25a-417f-a676-80465535a6c9"
      + schema_validation_enabled = true
      + sensitive_body            = (write-only attribute)
      + type                      = "Microsoft.CostManagement/exports@2025-03-01"
    }

  # azurerm_shared_image.win10_64_2009_alpha will be created
  + resource "azurerm_shared_image" "win10_64_2009_alpha" {
      + architecture        = "x64"
      + gallery_name        = "ronin_t_windows10_64_2009_alpha"
      + hyper_v_generation  = "V2"
      + id                  = (known after apply)
      + location            = "centralus"
      + name                = "win10-64-2009-alpha"
      + os_type             = "Windows"
      + release_note_uri    = "https://github.com/mozilla-platform-ops/worker-images/releases"
      + resource_group_name = "rg-packer-worker-images"

      + identifier {
          + offer     = "Windows-10"
          + publisher = "MicrosoftWindowsDesktop"
          + sku       = "win10-22h2-avd"
        }
    }

Plan: 3 to add, 0 to change, 0 to destroy.

Updates existing exports to be consistent with other subs.

azure_fx_nonci:

Terraform will perform the following actions:

  # azapi_resource.azure_infrasec_cost_export_actual will be updated in-place
  ~ resource "azapi_resource" "azure_infrasec_cost_export_actual" {
      ~ body                      = {
          ~ properties = {
              ~ schedule        = {
                  ~ recurrencePeriod = {
                      ~ from = "2025-09-02T00:00:00Z" -> "2025-09-02T00:00:00.000Z"
                      ~ to   = "2050-02-01T00:00:00Z" -> "2050-02-01T00:00:00.000Z"
                    }
                    # (2 unchanged attributes hidden)
                }
                # (5 unchanged attributes hidden)
            }
        }
        id                        = "/subscriptions/0a420ff9-bc77-4475-befc-a05071fc92ec/providers/Microsoft.CostManagement/exports/azure-firefox-nonci_actual"
        name                      = "azure-firefox-nonci_actual"
      ~ output                    = {
          - id         = "/subscriptions/0a420ff9-bc77-4475-befc-a05071fc92ec/providers/Microsoft.CostManagement/exports/azure-firefox-nonci_actual"
          - properties = {
              - nextRunTimeEstimate = "2025-11-21T23:00:00Z"
            }
          - type       = "Microsoft.CostManagement/exports"
        } -> (known after apply)
        # (7 unchanged attributes hidden)
    }

  # azapi_resource.azure_infrasec_cost_export_amortized will be updated in-place
  ~ resource "azapi_resource" "azure_infrasec_cost_export_amortized" {
      ~ body                      = {
          ~ properties = {
              ~ schedule        = {
                  ~ recurrencePeriod = {
                      ~ from = "2025-09-02T00:00:00Z" -> "2025-09-02T00:00:00.000Z"
                      ~ to   = "2050-02-01T00:00:00Z" -> "2050-02-01T00:00:00.000Z"
                    }
                    # (2 unchanged attributes hidden)
                }
                # (5 unchanged attributes hidden)
            }
        }
        id                        = "/subscriptions/0a420ff9-bc77-4475-befc-a05071fc92ec/providers/Microsoft.CostManagement/exports/azure-firefox-nonci_amortized"
        name                      = "azure-firefox-nonci_amortized"
      ~ output                    = {
          - id         = "/subscriptions/0a420ff9-bc77-4475-befc-a05071fc92ec/providers/Microsoft.CostManagement/exports/azure-firefox-nonci_amortized"
          - properties = {
              - nextRunTimeEstimate = "2025-11-21T23:00:00Z"
            }
          - type       = "Microsoft.CostManagement/exports"
        } -> (known after apply)
        # (7 unchanged attributes hidden)
    }

  # azurerm_monitor_aad_diagnostic_setting.splunk will be updated in-place
  ~ resource "azurerm_monitor_aad_diagnostic_setting" "splunk" {
        id                             = "/providers/Microsoft.AADIAM/diagnosticSettings/splunk-eventhub"
        name                           = "splunk-eventhub"
        # (4 unchanged attributes hidden)

      - enabled_log {
          - category = "ADFSSignInLogs" -> null
        }
      - enabled_log {
          - category = "AuditLogs" -> null
        }
      - enabled_log {
          - category = "EnrichedOffice365AuditLogs" -> null
        }
      - enabled_log {
          - category = "ManagedIdentitySignInLogs" -> null
        }
      - enabled_log {
          - category = "MicrosoftGraphActivityLogs" -> null
        }
      - enabled_log {
          - category = "NetworkAccessTrafficLogs" -> null
        }
      - enabled_log {
          - category = "NonInteractiveUserSignInLogs" -> null
        }
      - enabled_log {
          - category = "ProvisioningLogs" -> null
        }
      - enabled_log {
          - category = "RemoteNetworkHealthLogs" -> null
        }
      - enabled_log {
          - category = "RiskyServicePrincipals" -> null
        }
      - enabled_log {
          - category = "RiskyUsers" -> null
        }
      - enabled_log {
          - category = "ServicePrincipalRiskEvents" -> null
        }
      - enabled_log {
          - category = "ServicePrincipalSignInLogs" -> null
        }
      - enabled_log {
          - category = "SignInLogs" -> null
        }
      - enabled_log {
          - category = "UserRiskEvents" -> null
        }
      + enabled_log {
          + category = "ADFSSignInLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "AuditLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "EnrichedOffice365AuditLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "ManagedIdentitySignInLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "MicrosoftGraphActivityLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "NetworkAccessTrafficLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "NonInteractiveUserSignInLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "ProvisioningLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "RemoteNetworkHealthLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "RiskyServicePrincipals"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "RiskyUsers"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "ServicePrincipalRiskEvents"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "ServicePrincipalSignInLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "SignInLogs"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
      + enabled_log {
          + category = "UserRiskEvents"

          + retention_policy {
              + days    = 0
              + enabled = false
            }
        }
    }

  # azurerm_resource_group.this will be destroyed
  # (because azurerm_resource_group.this is not in configuration)
  - resource "azurerm_resource_group" "this" {
      - id         = "/subscriptions/0a420ff9-bc77-4475-befc-a05071fc92ec/resourceGroups/rg-azure-cost-mgmt" -> null
      - location   = "eastus" -> null
      - name       = "rg-azure-cost-mgmt" -> null
      - tags       = {
          - "Name"             = "rg-azure-cost-mgmt"
          - "owner_email"      = "mcornmesser@mozilla.com"
          - "production_state" = "production"
          - "project_name"     = "azure_fx_nonci"
          - "source_repo_url"  = "https://github.com/mozilla-platform-ops/relops_infra_as_code"
          - "terraform"        = "true"
        } -> null
        # (1 unchanged attribute hidden)
    }

  # azurerm_storage_account.this will be destroyed
  # (because azurerm_storage_account.this is not in configuration)
  - resource "azurerm_storage_account" "this" {
      - access_tier                        = "Hot" -> null
      - account_kind                       = "StorageV2" -> null
      - account_replication_type           = "GRS" -> null
      - account_tier                       = "Standard" -> null
      - allow_nested_items_to_be_public    = true -> null
      - cross_tenant_replication_enabled   = false -> null
      - default_to_oauth_authentication    = false -> null
      - dns_endpoint_type                  = "Standard" -> null
      - https_traffic_only_enabled         = true -> null
      - id                                 = "/subscriptions/0a420ff9-bc77-4475-befc-a05071fc92ec/resourceGroups/rg-azure-cost-mgmt/providers/Microsoft.Storage/storageAccounts/safinopsdatafirefoxnonci" -> null
      - infrastructure_encryption_enabled  = false -> null
      - is_hns_enabled                     = false -> null
      - large_file_share_enabled           = false -> null
      - local_user_enabled                 = true -> null
      - location                           = "eastus" -> null
      - min_tls_version                    = "TLS1_2" -> null
      - name                               = "safinopsdatafirefoxnonci" -> null
      - nfsv3_enabled                      = false -> null
      - primary_access_key                 = (sensitive value) -> null
      - primary_blob_connection_string     = (sensitive value) -> null
      - primary_blob_endpoint              = "https://safinopsdatafirefoxnonci.blob.core.windows.net/" -> null
      - primary_blob_host                  = "safinopsdatafirefoxnonci.blob.core.windows.net" -> null
      - primary_connection_string          = (sensitive value) -> null
      - primary_dfs_endpoint               = "https://safinopsdatafirefoxnonci.dfs.core.windows.net/" -> null
      - primary_dfs_host                   = "safinopsdatafirefoxnonci.dfs.core.windows.net" -> null
      - primary_file_endpoint              = "https://safinopsdatafirefoxnonci.file.core.windows.net/" -> null
      - primary_file_host                  = "safinopsdatafirefoxnonci.file.core.windows.net" -> null
      - primary_location                   = "eastus" -> null
      - primary_queue_endpoint             = "https://safinopsdatafirefoxnonci.queue.core.windows.net/" -> null
      - primary_queue_host                 = "safinopsdatafirefoxnonci.queue.core.windows.net" -> null
      - primary_table_endpoint             = "https://safinopsdatafirefoxnonci.table.core.windows.net/" -> null
      - primary_table_host                 = "safinopsdatafirefoxnonci.table.core.windows.net" -> null
      - primary_web_endpoint               = "https://safinopsdatafirefoxnonci.z13.web.core.windows.net/" -> null
      - primary_web_host                   = "safinopsdatafirefoxnonci.z13.web.core.windows.net" -> null
      - public_network_access_enabled      = true -> null
      - queue_encryption_key_type          = "Service" -> null
      - resource_group_name                = "rg-azure-cost-mgmt" -> null
      - secondary_access_key               = (sensitive value) -> null
      - secondary_connection_string        = (sensitive value) -> null
      - secondary_location                 = "westus" -> null
      - sftp_enabled                       = false -> null
      - shared_access_key_enabled          = true -> null
      - table_encryption_key_type          = "Service" -> null
      - tags                               = {
          - "Name"             = "safinopsdata"
          - "owner_email"      = "mcornmesser@mozilla.com"
          - "production_state" = "production"
          - "project_name"     = "azure_fx_nonci"
          - "source_repo_url"  = "https://github.com/mozilla-platform-ops/relops_infra_as_code"
          - "terraform"        = "true"
        } -> null
        # (56 unchanged attributes hidden)

      - blob_properties {
          - change_feed_enabled           = false -> null
          - change_feed_retention_in_days = 0 -> null
          - last_access_time_enabled      = false -> null
          - versioning_enabled            = false -> null
            # (1 unchanged attribute hidden)
        }

      - queue_properties {
          - hour_metrics {
              - enabled               = false -> null
              - include_apis          = false -> null
              - retention_policy_days = 0 -> null
              - version               = "1.0" -> null
            }
          - logging {
              - delete                = false -> null
              - read                  = false -> null
              - retention_policy_days = 0 -> null
              - version               = "1.0" -> null
              - write                 = false -> null
            }
          - minute_metrics {
              - enabled               = false -> null
              - include_apis          = false -> null
              - retention_policy_days = 0 -> null
              - version               = "1.0" -> null
            }
        }

      - share_properties {
          - retention_policy {
              - days = 7 -> null
            }
        }
    }

Plan: 0 to add, 3 to change, 2 to destroy.

Includes updates to logging resources and cleanup of the first attempt to set up exports.