DOWST.DEV

being the command line experience using the Azure CLI or Azure PowerShell. In this blog post we are going to have a look at 6 tips & tricks for managing your Microsoft Azure resources using the command line with Azure

many network security groups (NSG) in Azure.

without requiring sensitive information such as secrets, credentials, and certificates to be handled. Microsoft Entra ID manages these identities, enabling applications to obtain tokens for authentication. In this post, I will provide an example that illustrates how to use system and user-assigned managed identities with PowerShell.

Experienced PowerShell users will find the right cmdlet and parameter to achieve their goal but this can be more complicated for casual users.

support (yet). The Az PowerShell module is now the recommended PowerShell module for interacting with Azure.

deploying the AGIC and I figured this is something folks will need to deploy over and over so it makes sense to make it a little easier to do.

introduced. Since about a month, this new option for PowerShell has gone into public preview and it is really a great new feature, that can help a lot with your template development. In this post, I want to show you how you can use ARM Template what-if deployment, how it can be integrated in a Azure DevOps pipeline and what this means for my PowerShell module ARMHelper.

errors. Use PowerShell to find users with a profile path in your AD!

script can be used to help provide an automated method which can encrypt your OS and Data disks as well as automatically creating a Key Vault if one does not exist including the Access Policy configuration.

security orchestration automated response (SOAR) solution. Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response.

on-premises or Azure VMs to the fully-managed PaaS database service Azure SQL Database Managed Instance. In this post you will see how to create PowerShell scripts that automate migration to Managed Instance using Azure PowerShell and DbaTools.

PowerShell, Windows commands, and Azure management solutions for Windows Server on-premises. At the Windows Server Summit 2024, I had the chance to deliver a session with Ryan Willis Product Manager for Azure Arc and we went through different automation options ...

resources depending on the resource in question and the pricing tier used. A common scenario where you might want to restrict traffic is with an API flow where you may want some of your resources to ... Continue reading Automate Public IP Address Change Notifications for Azure Services ?

three part series.

you do that is through tracking resource usage with an Azure usage report. In this article, you?ll learn how to create a PowerShell script to easily query resource usage across all of your Azure resources by date.

keeping Azure organized is managing role assignments. Over time, you might end up with unused or "Unknown" role assignments, which can make management more challenging and potentially introduce security risks.

network setup, NSG rules, and IIS installation.

Managed DNS services. This has caused us to look for a different solution. Of course, I immediately thought of Azure, with an Azure DNS hosted zone.

it creates a dependency on a specific workstation and isn't as secure as you might like. Running Microsoft 365 PowerShell scripts in Azure Automation is a much better idea. It's time to dump the Task Scheduler!

great feature like AI-powered PowerShell module called Az Predictor Module (Azure PowerShell Predictions), which does what the name says, predict PowerShell commands. Now with az next, the team also brought a similar feature to the Azure CLI. The team's goal with az next is to guide users through their scenarios or sequence of jobs-to-be-done in tool, so that they could remain focused and avoid unnecessary external documentation searches.

you to predict your Azure PowerShell command!

includes: PowerShell support for Server Migration with Azure Migrate is now generally available, Updates to managing user authentication methods, New recommendations from Azure Advisor are now available, Microsoft announces the redesign of the Microsoft account Security page, QnA Maker introduces deep learning and as always our Microsoft Learn Module of the Week.

Azure. However, there's a secret that not many people know... you can manage your on-prem resources with Azure Arc.

Server. This allows you to onboard your Windows Server through a graphical wizard. With the wizard, you can easily onboard your Windows Server machine to Azure Arc. The wizard takes care of the following steps for you: verifying ...

PowerShell script.

Security License (ESU)

never again have to write a nested or linked template.

developing custom interfaces to trigger automation tasks. Based on the Azure Static Web Apps (SWA) Free plan.

services. However, Microsoft is deprecating Azure Automation Run As accounts in favor of using a managed identity. In this tutorial, you will learn what exactly is a managed identity, how to authenticate to Azure using the managed identity in a PowerShell [...]

with HTML table and CSV attachment. Features include:

configuration with PowerShell DSC.

The rich command set of Azure CLI expands capabilities of runbooks even further, allowing you to reap combined benefits of both, for automating and streamlining management of Azure resources. Azure Automation runbooks target orchestration on a wide array of resources such as Virtual Machines, Arc-enabled Servers, Databases, Storage, Azure Active Directory, and much more, along with complex workflows involving multiple resources.

use of an Azure PowerShell script.

Standard SKU.

This script allows you to verify the status of blobs listed in a given file, determine whether they are in an 'Archive' state, and provides visibility on their rehydration status.

have a look at how you can run your Azure Cloud Shell in the Windows Terminal. Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell.

Azure and Azure DevOps from your pipelines for deploying Terraform configurations. Workload Identity federation To follow along with this tutorial, you will need: To follow along with more code examples, check out this GitHub repository:JeffBrownTech/azure-devops-terraform-oidc-examples What is Workload Identity federation?

how to create HTTP triggered functions written in PowerShell!

Azure Functions

certifications, migration, help to understand basic concepts.) related to Microsoft cloud technologies (Azure, Azure AD, SharePoint, Microsoft 365, Teams, Power Platform and so on)

updates in the Network and EventGrid modules, read more: s://t.co/Jxv01aCglT

documentation but is not available in Cloud Shell?

both? This lesson presents a comprehensive comparison of the two primary scripting languages in the Azure cloud.

along the way. See how to use the resource graph to efficiently get information about your resources in Azure.

of specific cmdlets for those operations or services. This is where the Invoke-AzRestMethod cmdlet comes into play, which allows PowerShell scripts to communicate with Azure services by sending HTTP requests to Azure's REST API. It acts as a bridge between PowerShell and Azure services that still need to be integrated with cmdlets.

subscriptions that have one or more Azure virtual network service endpoints assigned.

their powershell automation to their teams. And it’s free!

templates (WIP). It has capabilities to insert appropriate Azure Icons depending upon the type of the Azure Resource you have in your Resource Group, like Virtual Machine, Virtual Network, Subnet etc.

operate in; making a Discord bot is hardT. I've made some scripts for my own usage that integrate with Discord bots, but they've always been for my own use only.

PowerShell commands necessary for Azure administrators as well as required to pass the Azure Administrator certification exams from Microsoft AZ-104

solutions for cloud operations for Windows Server through Azure Arc.

Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell.

Azure Kubernetes Service (AKS) Edge Essentials. In this blog post we are going to have a look at how you can connect this AKS Edge Essentials cluster to Microsoft Azure using Azure Arc-enabled Kubernetes, and how ...

Stop or Restart an Azure VM.

lower cost than earlier versions. You can convert existing disks to Premium SSD v2 using PowerShell. However, it's crucial to understand the specific limitations and requirements beforehand.

have written an extensive blog post about this subject before, which I encourage you to read if you have never created this connection before. I want to focus on how you can create a secure GitHub webhook to trigger an Azure PowerShell Function. We will make use of a secret that we will store in Azure Key vault.

using PowerShell? Check out this post by Aresh Sarakari on how you can do just that.

clusters, you want to use service principals for automated authentication during the onboarding process for Azure Arc resources. Microsoft provides you with an option in the Azure portal to create that service principal. When you use this, you can set .

in a specified subscription.

types (block blobs, page blobs, and append blobs) available on Azure storage accounts. Storage accounts on Azure support three types of blobs, each of which is used for a different purpose. Therefore, it's important to determine the type of blob you need when you create it, as it is not possible to change the type once the blob is created. The supported blob types are as follows.

Windows Server 2016, Windows Server 2019 and Windows Server 2022, for testing purposes with Azure PowerShell.

at companies, the resource type is mentioned in the name of the resource. To save space, an abbreviation is used.

flexible is an Azure Automation account.

a pipeline build.

service, including Microsoft. With Microsoft's Azure Functions, you can create function apps that support many languages, including Azure PowerShell.

execute a planned failover of your Azure Storage account. This guide demonstrates how to perform this using PowerShell.

protect Key Vault items when deleted by accident. When deleted you are able to restore that item through the portal or PowerShell. But what if someone has deleted the Key Vault itself with all the items and softdeleted items included. There is no option to restore a Key Vault. In this article I will describe a way how to backup and restore a Key Vault when deleted.

transfer data (data migration) from and to Azure storage. It is designed for high performance transfers and can be deployed on both Windows (32-bit and 64-bit) and Linux systems, but also on macOS.

a free download from Microsoft (version 5.6.2019) and includes icons for almost all Azure services and Microsoft cloud related technologies currently available.

running? I will show you three ways to do that in this blog post.

Prior to this date you will need to migrate all your agent-based hybrid workers to the extension-bas...

specific recommendations which may not be relevant to you. By navigating to the ASC's default initiative in the Azure Policy blade, you can disable a recommendation:

cmdlet output to display the physical location for paired regions in Azure. This information isn't available by default but can help you understand the resiliency and redundancy of your Azure resources like geo-redundant storage (GRS) and other Azure services that rely on Azure Storage for replication.

- Find-AutomationRunAsAccounts.ps1

I found there wasn't a whole lot out there, and what was there wasn't quite what fit our needs. So I created my own function, Get-AzWebJobStatus,

for a customer. For me these scenario's always go into scripting or templates. That means for every change I want to be redeploy the environment and see if everything is still working. For that I need random names. You could pick a name, add a number and up the number for every new deployment but, where's the fun in that?

remediated in all your Azure subscriptions with PowerShell.

authentication necessary.

Azure Portal shows

all of your Azure subscriptions to optimize cost...

covering the introduction to Azure Automation, creating automation runbooks, dealing with assets, testing and publishing runbooks.

Power Automate to integrated PowerShell into your Flows and never leave the Microsoft Cloud!

PowerShell. This is using the PowerShell SDK running on a machine that's not in Azure.

I even went so far as to ask an Azure Product Manager but still didn't receive a clear answer. What I did find out is that Microsoft maintains an Azure services directory on their Azure products website. I figured that was a good place to start looking and while the website is informative, it didn't provide a count of the service offerings. Manually counting them wouldn't be an efficient or accurate way of accomplishing the task of determining how many services are offered so I decided to use PowerShell for the task.

script.

device login methods, verifying sessions, and managing multiple subscriptions.

interesting to provide to all users, who are already familiar with it, a method to export all keys, certs and secrets stored in it once via Powershell.

Azure PowerShell. These cmdlets, introduced in the Az PowerShell module version 9, are used to configure your global settings for Azure PowerShell.

IoT Hub is used to connect, manage, and monitor billions of IoT devices. It securely connects the devices to develop IoT applications. IoT Hub is a flexible cloud platform service that supports multiple protocols and open-source SDKs.

Azure CLI. This step-by-step guide walks through setting up an Automation account, creating a runbook, and executing it in Azure.

there can be one or more data centers. Azure Availability Zone is made out of one or more datacentres in the same Azure region, which have independent power, hardware, networking, and cooling. All Zone redundant service will replicate data and application across Availability Zone for high resilience. Each Azure region contains a minimum of three Azure Availability Zones.

Azure environment but also my on-premises environment. I find Azure automation to be a great solution for managing and running your automation, instead of having them run on a server with scheduled tasks.

Microsoft Docs, the Azure Mobile App or shell.azure.com

PowerShell.

handy this feature is to manage Azure virtual machines (VMs). In this blog post, we are going to have a look at how you can run scripts against multiple Azure virtual machines (VMs) by using PowerShell and the Invoke-AzVMRunCommand feature.

developing scripts in Azure to send emails, know that there is no native email service available to you.

cases we've been asked to record our presentations. Storage has quickly become an issue and so I have been investigating ways to transfer the recorded presentations to the cloud. Now the transfer can take place via GUI however automating the transfer might be needed in future. Luckily uploading files to Azure Storage via PowerShell is an option.

RunAs account because it doesn't require certificate/secret renewal. Therefore it is maintenance-free.

CLI. Two of the most popular ways to automate Azure workloads are always presented separately. Why? Azure CLI and PowerShell work well together right out of the box for all Azure services. How can we bring the two automation tools together?

cumbersome to install the Microsoft.Graph PowerShell module in an Automation account.

declarative automation of some of the tasks required to install and configure the Azure File Sync agent on Windows Server.

Variable-Length Subnet Masking (VLSM) consists of segregating subnets into smaller segments, allowing network engineers to divide an IP address space into a hierarchy of subnets of different sizes, making it possible to create very different host subnets without account. waste a large number of addresses. This in turn can be a pretty annoying task, especially when it needs to be done several times, so I decided to do a powershell module to just tell you how many hosts I need in a given segment and it will tell me what the addressing is.

backwards: My journey into PowerShell, alongside Azure.

module will now be released on the first Tuesday of each month. We are releasing an AzPreview PowerShell module that includes all Azure PowerShell modules available and supported by Microsoft.

single-sign-on, a search fix, and some additional "proxy" cmdlets that can be used as examples for making more "friendly" ones.

across any of your AzureContinue Reading

PowerShell global settings using the PowerShell cmdlets Get-AzConfig, Update-AzConfig, Export-AzConfig, Import-AzConfig, and Clear-AzConfig.

ExchangeOnline and Graph in this practical powershell example where we'll discuss how to connect, how to add permissions to a service principal and also a little bonus tip on how to get an access token for graph using Az and managed identity with the Get-AzAccessToken cmdlet.

a controlled, unified workflow, Azure administrators can define, deploy, enforce, and maintain standardized Azure environments.

Scripts written for the AzureRM cmdlets won’t automatically work with the new module. To make the transition easier, Az offers tools to allow you to run your existing scripts using AzureRM. No migration to a new command set is ever convenient, but this article will help you get started on transitioning to the new module.

difficult to stop, and before you know it you could be selling your grandmother just to afford one more month of that delicious compute. Hopefully your circumstances never get that dire, but I've seen plenty of companies entrench themselves into the highly addictive world of automated, scalable infrastructure, but then struggle to understand the often-astronomical monthly bill.

in a lot of the communities I frequent but a worry popped up by someone recently; how am I sure that the Azure Application Proxy is always completely functional at my clients? You can monitor the service of course, but that does not mean that the entire connection to Azure is functional.

needed an easy way to manage virtual desktops over many regions. This deployment actually got me thinking about how monitoring the WVD environment should be done.

different resource group or subscription. To do this, you can use the Azure PowerShell module and the Move-AzResource cmdlet. You can find more about the Move-AzResource cmdlet on Microsoft Learn. The Move-AzResource cmdlet moves existing resources to a ...

Az.ContainerRegistry Azure PowerShell module wasn't fully featured. Sometimes, PowerShell users had to take advantage of the Az CLI. We want to allow PowerShell user to be able to fully manage container images. Starting with Az.ContainerRegistry version 2.2.1, we will gradually be rolling out new cmdlets and new parameters. In this release, you can now fully manage (Get-, Remove-, Update-) repositories, manifests, and tags with increased performance.

subscription in Microsoft Defender

erase all the secrets, keys, and certificates in it.

more.

requested this feature be added to Azure Data Studio and it has become the most popular feature request for Notebooks. (Although, I'm sure it only became the most popular after they added copying from the results grid a few months ago )

the tips and techniques you'll learn in this article, you'll be well on your way to scripting your way to automation greatness.

workflows, now supports PowerShell. Common scenarios made possible by Durable Functions include orchestrating the management of complex Azure Resource deployments involving sequential and parallel steps. Long-running workflows are supported, and Durable Functions provides built-in HTTP endpoints for monitoring their progress.

reliable and resilient. More, Blob can be used as a trigger for Azure Functions when you add a file and you can play with different pricing tiers.

information. Why? It brings comfort while giving up security. It's your choice. In this blog post I will show you a walkthrough how to connect to Azure with stored credentials. The credentials are encryptet with a certificate. Let's move on.

generate resource names, fret not! I've been there, and...

updates across hybrid environments. Azure Automation focuses on an infrastructure perspective and allows you to build/deploy resources, handling updates and configuring all type of resources (not only in Azure but also on premise).

Virtual Machines.

runbooks directly from Visual Studio Code. Visual Studio Code is a light weight source code editor which runs on your desktop and is available for Linux, macOS, and Windows.

for a while without enforced consistency of your Role Based Access Control, you might want to explore your existing RBAC assignments at scale or query the permissions for a specific user.

In this way, you can create backups, and you can restore files and folders easily whenever needed. In this post, we will be looking at configuring Recovery Services vaults on Azure file shares and restoring deleted files from a backup using PowerShell.

Commands within your VMs using the Azure Portal or the Azure PowerShell or Azure CLI modules....

You can also use those tools in a local container and connect to it using the command line or Visual Studio Code. In this blog post, I will show you how to install everything and connect and use it locally.

Eamon O'Reilly, who's leading the efforts at Microsoft for serverless automation, shows you how to get started.

by configuring a data lifecycle management.

also can encrypt Azure Linux VM by using Azure Key Vault & dm-crypt. In this post, I am going to demonstrate how we can encrypt Azure Linux VM.

hard disks. It falls under physical data security and it prevents data breaches from stolen hard disks (physical & virtual). If it is a Windows machine, we can simply use BitLocker for disk encryption. Also, there are other third-party vendors such as Thales e-Security which provides disk encryption solutions for organizations.

then retrieve them from PowerShell.

specialists get small digestible bites about new technologies, complex scripts, and solutions you could be implementing in your MSP today. I'm fairly anti-tool culture where MSPs get a different tool for each minor inconvenience and focus just on that tool, so I'll be focussed on modern technologies in the Microsoft stack, but also will cover other external tools if they make a big enough difference.

a shared printer via Universal Print

With examples for Azure DevOps pipelines and Github Actions

and GitHub Actions. I mentioned one way to test ARM templates in a pipeline there (the WhatIf module). But there are other options available. And how about testing locally? In this post we will look at different tools that can help you with testing ARM templates.

years. One problem that has brought with it is the high probability of being somewhere with no cell phone data service or poor cell phone data. Couple with my incredibly poor memory, I have often forgotten to turn off servers to save on cost in my dev or test environment until I'm out in the woods. Also, I wanted the ability to use Google Voice as well as Siri in my car or even at home, to turn off, turn on, or check the status of my servers in my Azure tenants. This has even come in handy when I didn't have my phone on me and had to use the wife's phone to turn on or off some servers in my tenant. (I set it to only accept messages from my phone number as well as my wife's so if someone happened to figure out the phone number, they couldn't give any commands anyways - we will get into this later).

on the prerequisite skills and technologies needed to succeed with Azure DevOps as the preferred method for deploying applications into Azure, and is all self-paced.

They're easy to build and allow you get started without needing a degree in programming.... Our speaker, Jeremy Brown, will walk through the basics of serverless apps, build a simple app AND put it online in 45 minutes!

allows for passwords and secrets to be shared among users via Azure AD authentication and policies with the relatively inexpensive Azure Key Vault resource. While communications are always encrypted and stored securely when working with the Azure Key Vault, further security can be utilized to independantly encrypting the passwords before they are transmitted to Azure.

identity and service principals. Lots of demos including service principals with secrets and certificates with PowerShell. Concepts apply to AZ CLI as well.

Azure Blog Storage using Connection String. Recently I was given Connection String, Container name and had to download some files from Azur Blog Storage. After some research and trying Connect-AzAccount, I found that the proper way to go is thru New-AzStorageContext.

Blob storage account using Power Automate Desktop. Power Automate Desktop is a great tool to build automation on your desktop. You can create flows,?interact with everyday tools such as email and excel and work with modern and legacy applications.

Microsoft.Resources/deploymentScripts, users can execute deployment scripts in template deployments and review execution results. These scripts can be used for performing custom steps such as:

many API connections which might be never used later. Those orphan resources could make your resource group a great mess and hard to choose the right API connection in the logic app. So, I wrote the PowerShell Script to help manage API connections in the resource group.

Directory (Azure AD) managed identity (MSI) to authenticate in Azure PowerShell on your on-premises Linux and Windows Server machines. The moment you want to run some automation directly on your servers, you often .

administrator passwords configured on Windows Servers. Before we get started, let us have a quick overview of what Azure Key Vault is.

change the network, change the disk name, etc

can use to organize and control access to your packages. In other words it is a place for storing and sharing packages with controlled access through Azure Dev Ops.

infrastructure visualizations by just typing a PowerShell cmdlet and passing the name of one or more Azure Resource Groups.

Protocol) addresses has been around for years; most Azure resources support it, a Storage account is no different.

exclusively using the Azure portal/dashboard. And since I could do pretty much everything I needed to do directly on the portal, I never bothered with Azure PowerShell or any of the other methods of communicating with Azure.

Following our release cadence, this is the second breaking change release for 2021. Because this release includes updates related to security and the switch to MS Graph, we recommend that you review the release notes before upgrading.