Upgrade to Pro — share decks privately, control downloads, hide ads and more …

GABC2019: Azure Resource Graph - The Azure CMDB by Roman Stadlmair

GABC2019: Azure Resource Graph - The Azure CMDB by Roman Stadlmair

When it comes to manage cloud-based IT, some traditional IT management challenges are still valid, i.e. the question: "What do i own ?". So far the Azure REST-API was responsoible to provide that data via PowerShell, the Portal or direct API calls. As Azure infrastructure is getting larger, Microsoft has decided to release a "CMDB" type solution, which stores the resource data in a database, and is much easier to query that the REST-API. 

Get an overview of Azure Resource Graph, the if, why and how in comparison to the methods you know so far and see some demos how to get data from Azure the easy way. 

Azure Zurich User Group
PRO

April 27, 2019
Tweet

More Decks by Azure Zurich User Group

Other Decks in Programming

Transcript

  1. Azure Resource Graph The Azure CMDB Roman Stadlmair PowerShell MVP

    Dealing with Azure Resource Manager, Service Management, E-mail Encryption, … www.cloudnative.at www.rconsult.at XING, LinkedIn ”We rarely think of what we have, but always what we lack” Arthur Schopenhauer
  2. Thanks to our sponsors!

  3. What do you own in Azure?

  4. None
  5. Cloud deployment approaches • Imperative • Declarative

  6. Nothing can exist without order. Nothing can arise without chaos.

    (Albert Einstein)
  7. Why do we want to know ?

  8. Ways to retrieve data from Azure

  9. None
  10. Overview of Azure Resources „read“ options METHOD MULTI- SUBSCRIPTION AWARE

    ? QUERY OPTIONS OUTPUT FORMAT DATA RICHNESS OBJECT TYPE REST-API No $filter option for all properties JSON Weak JSON Az CLI No location, tags, name, namespace, resourcegroup, resource type Query language: JMESPATH.ORG JSON, JSONC, table, tsv, yaml Weak String PowerShell Az.Resources + Az.* No Resource type, resource group, tag name, tag value Query Language: ODATA PowerShell Object Weak PSResource
  11. Getting a full picture needs 2 steps! Generic ARM Specific

    Provider Full ARM environment
  12. None
  13. Azure Resource Graph to get the full picture

  14. How does it work ? Tenant Subscription 2 Subscription 1

    Azure Key Vault Event Grid Route Filters Azure SDK Storage blob VHD WebJobs Azure Automation Cosmos DB Content Delivery Network (CDN) IoT Hub Virtual machine On Change
  15. None
  16. Summary and usage advise Good use • Cross subscription •

    Custom reporting • Interface for external appliactions • [Future] Change Tracking Not recommended • Structural misconfigs like empty Resource Groups
  17. Call to Action (4 Steps) 1. Switch to preview in

    the portal in „All resources“ 2. Change all your query scripts to Azure Resource Graph 3. Add Azure Resource Graph Explorer to your Azure Portal 4. Think of integration needs (CMDB, Controlling, ...)
  18. Links • Azure Resource Graph official documentation https://docs.microsoft.com/en-us/azure/governance/resource-graph/ • Query

    Language reference https://docs.microsoft.com/en-us/azure/kusto/query/ • My GitHub Repo with the scripts from the demo https://github.com/RStadlmair/AzureRGExperiments • Change Feature https://docs.microsoft.com/en-US/azure/governance/resource- graph/how-to/get-resource-changes
  19. Contact options LinkedIn https://www.xing.com/profile/Roman_Stadlmair Projekte-IT-Training mobil: +43 676 845 480

    801 E-Mail: [email protected] www.cloudnative.at www.powershell.co.at www.rconsult.at