Skip to main content

Microsoft Azure

Cloudaware ingests configuration, inventory, and selected telemetry from Microsoft Azure subscriptions via Azure Resource Manager and Microsoft Graph APIs.

info
  • Audience: Cloudaware administrators, cloud engineers, security teams, and FinOps users
  • Outcome: Azure tenants and subscriptions are connected to Cloudaware for inventory, configuration, identity context, telemetry, and optional billing and AKS data collection

Use this section to prepare Azure, grant least‑privilege access, connect tenants and subscriptions, validate ingestion, and configure billing and AKS discovery.

What the Azure Integration Provides​

  • Unified CMDB objects for Azure subscriptions, resource groups, compute, networking, storage, databases, and many PaaS services.
  • Support for Microsoft Entra ID/Azure AD identity objects (users, groups, devices, service principals) used by modules such as Cost Management, Compliance Engine v2, and Advanced Analytics.
  • Optional deep visibility into AKS clusters, Key Vaults, reservations, and Intune‑managed devices when additional permissions are granted.
  • Cross‑cloud reporting and policies that combine Azure data with other providers.

Integration Workflow​

Work through the guides in this section in the following order:

  1. Prerequisites — What you need in Cloudaware and Azure before starting.
  2. Least-Privilege Policies — Recommended RBAC roles, Graph permissions, and optional extended permissions.
  3. Setup — Step‑by‑step configuration of the Azure app registration, RBAC assignments, and Cloudaware connection.
  4. Verification — How to confirm that data is flowing and subscriptions are healthy.
  5. Troubleshooting — Common issues, diagnostics, and resolution steps.

See also:

  • Service Coverage — Summary of Azure services and object families discovered by Cloudaware.
  • Resource Coverage — Details about Azure resources discovered by Cloudaware.

Follow-Up Integrations​

  • Azure Billing — Cost and usage data ingestion for Azure Cost Management. Configure the Azure cloud integration first, then add Azure Billing if you need cost analytics and reporting.
  • AKS Cluster Access — Kubernetes access configuration for discovering AKS objects.

Supported Environments​

  • Commercial Azure cloud
  • Azure Government, China, and Germany
warning

Some services may not be available in every region or sovereign cloud.

For CMDB schema details and example queries, see the Microsoft Azure section in Provider Quick Reference.