Upgrade to Pro — share decks privately, control downloads, hide ads and more …

GABC2019: Azure Resource Graph - The Azure CMDB by Roman Stadlmair

GABC2019: Azure Resource Graph - The Azure CMDB by Roman Stadlmair

When it comes to manage cloud-based IT, some traditional IT management challenges are still valid, i.e. the question: "What do i own ?". So far the Azure REST-API was responsoible to provide that data via PowerShell, the Portal or direct API calls. As Azure infrastructure is getting larger, Microsoft has decided to release a "CMDB" type solution, which stores the resource data in a database, and is much easier to query that the REST-API. 

Get an overview of Azure Resource Graph, the if, why and how in comparison to the methods you know so far and see some demos how to get data from Azure the easy way. 

Azure Zurich User Group

April 27, 2019

More Decks by Azure Zurich User Group

Other Decks in Programming


  1. Azure Resource Graph The Azure CMDB Roman Stadlmair PowerShell MVP

    Dealing with Azure Resource Manager, Service Management, E-mail Encryption, … www.cloudnative.at www.rconsult.at XING, LinkedIn ”We rarely think of what we have, but always what we lack” Arthur Schopenhauer
  2. Overview of Azure Resources „read“ options METHOD MULTI- SUBSCRIPTION AWARE

    ? QUERY OPTIONS OUTPUT FORMAT DATA RICHNESS OBJECT TYPE REST-API No $filter option for all properties JSON Weak JSON Az CLI No location, tags, name, namespace, resourcegroup, resource type Query language: JMESPATH.ORG JSON, JSONC, table, tsv, yaml Weak String PowerShell Az.Resources + Az.* No Resource type, resource group, tag name, tag value Query Language: ODATA PowerShell Object Weak PSResource
  3. How does it work ? Tenant Subscription 2 Subscription 1

    Azure Key Vault Event Grid Route Filters Azure SDK Storage blob VHD WebJobs Azure Automation Cosmos DB Content Delivery Network (CDN) IoT Hub Virtual machine On Change
  4. Summary and usage advise Good use • Cross subscription •

    Custom reporting • Interface for external appliactions • [Future] Change Tracking Not recommended • Structural misconfigs like empty Resource Groups
  5. Call to Action (4 Steps) 1. Switch to preview in

    the portal in „All resources“ 2. Change all your query scripts to Azure Resource Graph 3. Add Azure Resource Graph Explorer to your Azure Portal 4. Think of integration needs (CMDB, Controlling, ...)
  6. Links • Azure Resource Graph official documentation https://docs.microsoft.com/en-us/azure/governance/resource-graph/ • Query

    Language reference https://docs.microsoft.com/en-us/azure/kusto/query/ • My GitHub Repo with the scripts from the demo https://github.com/RStadlmair/AzureRGExperiments • Change Feature https://docs.microsoft.com/en-US/azure/governance/resource- graph/how-to/get-resource-changes