Azure Policy Exemptions Added to Resource Graph

Have you tried to get data on exemptions in your environment? Only to find they’re not in Azure Resource Graph, like policies, assignments and their states. Previously you would have to queried the API, which is limited to querying one subscription at a time. Not exactly “cloud scale.” Sometime in the last few weeks “microsoft.authorization/policyexemptions” …

Read more

Build Azure Policy Compliance Workbook

Did you know that your Azure Policy data is in Azure Resource Graph? It is under the policyresources table. Since it is in Azure Resource Graph that means we can query it from Azure Workbooks, and create Workbooks like my inventory workbook. If you’re not familiar with Azure Resource Graph I have a primer you …

Read more

Deploy Azure Monitor Agent at Scale

There’s a new agent for Azure Monitor. Naturally, at some point you’ll need to deploy this agent. And if we’re talking cloud, you’ll probably need to do it at scale. Even doing it on 50 servers is more than I would want to touch by hand At scale, your first thought might be PowerShell. While …

Read more

Auto Install Azure Monitor Agent with Azure Policy

Getting the Azure Monitor Agent, formerly the Microsoft Monitor Agent (MMA) and Operations Management Suite (OMS) agent, installed on servers, and more importantly installed on new servers is not a very fun or enjoyable task. There are a number of ways to do it. In this post I’ll show you how to do it, and …

Read more