@cloudgraph/cg-provider-azure NPM

CloudGraph Azure Provider

Scan cloud infrastructure via the Azure SDK

CloudGraph Azure Provider

Docs

💻 Full CloudGraph Documentation Including Azure Examples

Install

Install the azure provider in CloudGraph

cg init azure

Authentication

Authenticate the CloudGraph Azure Provider any of the following ways:

Credentials added using the init command

CloudGraph needs read permissions in order to ingest your data. To keep things easy you can use the same permissions that we use internally when we run CloudGraph to power AutoCloud. Here are the Azure Docs for generating the correct Service Principal with a Client Secret (feel free to leave out AutoCloud specific configuration).

Supported Services

Service	Relations
actionGroup	resourceGroup, authRoleDefinition, eventHub, functionApp
activityLogAlerts	resourceGroup
adApplication	authRoleAssignment, adGroup, adServicePrincipal, adUser
adGroup	adApplication, authRoleAssignment
adIdentitySecurityDefaultsEnforcementPolicy
adServicePrincipal	adApplication, authRoleAssignment
adUser	adApplication, authRoleAssignment
aksManagedCluster	resourceGroup, virtualMachineScaleSet
applicationGateway	resourceGroup
appInsights	resourceGroup
appServiceEnvironment	resourceGroup, virtualNetwork
appServicePlan	resourceGroup, appServiceWebApp
appServiceWebApp	resourceGroup, appServicePlan, storageAccount
arcConnectedCluster	resourceGroup
authRoleAssignment	adApplication, adGroup, adServicePrincipal, adUser, authRoleDefinition
authRoleDefinition	actionGroup, authRoleAssignment
autoProvisioningSettings
backupInstance	backupVaults, resourceGroup
backupPolicy	backupVaults, resourceGroup
backupVaults	backupInstances, backupPolicies, resourceGroup
cdnCustomDomains	cdnEndpoints, resourceGroup
cdnEndpoints	cdnCustomDomains, cdnOrigins, cdnOriginGroups, cdnProfiles, resourceGroup
cdnProfiles	cdnEndpoints, resourceGroup
cdnOrigins	cdnEndpoints, cdnOriginGroups, resourceGroup
cdnOriginGroups	cdnEndpoints, cdnOrigins, resourceGroup
cognitiveServicesAccount	resourceGroup
containerRegistry	keyVault, resourceGroup
cosmosDb	resourceGroup
dataCollectionRule	resourceGroup, logAnalyticsWorkspace
dataFactory	integrationRuntime, resourceGroup
databaseManagedSqlInstance	resourceGroup
databaseMySql	resourceGroup, mySqlServers
databasePostgreSql	resourceGroup, postgreSqlServers
databaseSql	resourceGroup, sqlServers
databaseSqlVm	resourceGroup
dataLakeStorageAccounts	resourceGroup
diagnosticSettings	resourceGroup, storageAccount
disk	resourceGroup, virtualMachine
dns	resourceGroup
eventGrid	resourceGroup
eventHub	resourceGroup, actionGroup, storageAccount
expressRouteGateways	resourceGroup
fileShare	resourceGroup, storageAccount
firewall	publicIp, virtualNetwork
functionApp	resourceGroup, actionGroup
integrationRuntime	dataFactory, resourceGroup
keyVault	resourceGroup
loadBalancer	loadBalancer, publicIp, resourceGroup, virtualNetwork
logAnalyticsSolution	resourceGroup, logAnalyticsWorkspace
logAnalyticsWorkspace	resourceGroup, dataCollectionRule, logAnalyticsSolution
logProfiles	storageAccount
machineLearningWorkspaces	resourceGroup
metricAlert	resourceGroup
mySqlServers	resourceGroup, databaseMySql
networkInterface	publicIp, resourceGroup, securityGroup, virtualMachine, virtualNetwork
networkWatcher	resourceGroup
policyAssignment
postgreSqlServers	resourceGroup, databasePostgreSql
privateDns	resourceGroup
publicIp	networkInterface, resourceGroup
publicIpPrefix
recoveryInstances	recoveryVaults, resourceGroup
recoveryPolicies	recoveryVaults, resourceGroup
recoveryVaults	recoveryInstances, recoveryPolicies, resourceGroup
redisCaches	resourceGroup
replicationAppliances	resourceGroup
replicationCenters	resourceGroup
replicationNetworks	resourceGroup
replicationPolicies	resourceGroup
resourceGroup	all services
routeFilter
routeTable
securityAssessments
securityContacts
securityGroup	networkInterface, resourceGroup
securityPricings
securitySettings
serviceBus	resourceGroup
sqlServers	databaseSql, resourceGroup
storageAccount	diagnosticSetting, logProfiles, resourceGroup, storageContainer
storageBlob	resourceGroup, storageContainer
storageContainer	resourceGroup, storageAccount
synapseBigDataPools	resourceGroup, synapseWorkspaces
synapseSqlPools	resourceGroup, synapseWorkspaces
synapseWorkspaces	resourceGroup, synapseBigDataPools, synapseSqlPools
trafficManager	resourceGroup
virtualMachine	disk, networkInterface, resourceGroup, virtualNetwork, virtualMachineScaleSet
virtualMachineScaleSet	resourceGroup, virtualMachine, aksManagedCluster
virtualNetwork	appServiceEnvironment,networkInterface, resourceGroup virtualMachine