AzResourceTypeAdvertizer

last sync: 2025-Apr-29 17:44:12 Etc/UTC

Virtual Machines - Microsoft Azure Resource type
microsoft.compute/virtualmachines

Azure Resource Provider Resource provider (RP) - Microsoft Compute [Microsoft.Compute]
RP Microsoft.Compute
RP display name Microsoft Compute
Azure Resource Type
RP Resource types		 Resource types: 132
Azure Policy Alias
RP aliases		 RP aliases: 2161
Azure Policy definition
RP Azure Policy		 Azure Policy definitions: 487
• if: 480
• then.deployment: 182
• then.details: 2
• then.existenceCondition: 0
• then.operations: 0
Azure RBAC Role Based Access Control
RP RBAC operations		 RP RBAC operations: 279
• RP RBAC operationType action: 94
• RP RBAC operationType delete: 37
• RP RBAC operationType read: 106
• RP RBAC operationType write: 42
Azure RBAC Role definition
RP RBAC Roles & Operation actions		 Unique RBAC Roles: 64
• RBAC Roles with action operationType: 34
• RBAC Roles with delete operationType: 22
• RBAC Roles with read operationType: 59
• RBAC Roles with write operationType: 30
Azure Application
RP related 1st party Service Principals		 RP related 1st party Service Principals: 9
• Microsoft Azure Windows Virtual Machine Sign-in (Azure Windows VM Sign-In) (appId: 372140e0-b3b7-4226-8ef9-d57986796201) [ JSON;CSV]
• Microsoft Azure Linux Virtual Machine Sign-In (Azure Linux VM Sign-In) (appId: ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0) [ JSON;CSV]
• Marketplace Caps API (appId: 184909ca-69f1-4368-a6a7-c558ee6eb0bd) [ JSON;CSV]
• Compute Usage Provider (appId: a303894e-f1d8-4a37-bf10-67aa654a0596) [ JSON;CSV]
• Compute Resource Provider (Managed Disks Resource Provider) (appId: 60e6cd67-9c8c-4951-9b3c-23c25a2169af) [ JSON;CSV]
• Compute Recommendation Service (appId: b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab) [ JSON;CSV]
• Compute Artifacts Publishing Service (appId: a8b6bf88-1d1a-4626-b040-9a729ea93c65) [ JSON;CSV]
• Azure Regional Service Manager (appId: 5e5e43d4-54da-4211-86a4-c6e7f3715801) [ JSON;CSV]
• Azure Compute (appId: 579d9c9d-4c83-4efc-8124-7eba65ed3356) [ JSON;CSV]
All Azure RPs • Microsoft Learn
• AzResourceTypesAdvertizer (Microsoft only)
Azure Resource Type Resource type (RT) - Virtual Machines [microsoft.compute/virtualmachines]
RT information
RT microsoft.compute/virtualmachines
RT display name Virtual Machines
RT type only
(without RP)		 virtualMachines
RT sub- Resource types sub-Resource types: 13
RT schema RT schema API versions: 26
• 2024-11-01
• 2024-07-01
• 2024-03-01
• 2023-09-01
• 2023-07-01
• 2023-03-01
• 2022-11-01
• 2022-08-01
• 2022-03-01
• 2021-11-01
• 2021-07-01
• 2021-04-01
• 2021-03-01
• 2020-12-01
• 2020-06-01
• 2019-12-01
• 2019-07-01
• 2019-03-01
• 2018-10-01
• 2018-06-01
• 2018-04-01
• 2017-12-01
• 2017-03-30
• 2016-04-30-preview
• 2016-03-30
• 2015-06-15
All Microsoft Azure RTs AzResourceTypesAdvertizer
Aliases and Azure Policy
Azure Policy Alias
Aliases		 aliases: 287
Azure Policy definition
Azure Policy		 Azure Policy definitions: 392
• if: 389
• then.deployment: 108
• then.details: 2
• then.existenceCondition: 0
• then.operations: 0
RBAC Operations and Roles & Roles related operation actions
Azure RBAC Role Based Access Control
RBAC operations		 RBAC operations: 28
• RBAC operationType action: 25
• RBAC operationType delete: 1
• RBAC operationType read: 1
• RBAC operationType write: 1
Azure RBAC Role definition
RBAC Roles & Operation actions		 Unique RBAC Roles: 41
• RBAC Roles with action operationType: 6
• RBAC Roles with delete operationType: 10
• RBAC Roles with read operationType: 38
• RBAC Roles with write operationType: 15
Capabilities & Locations
Azure Resource Diagnostic settings logs
Diagnostic logs		 True
log-categories
Azure Resource Diagnostic settings metrics
Diagnostic metrics		 True
metrics
Azure Customer-managed key
Customer-managed key (CMK) [experimental]		 True
• Microsoft Learn
• Enforce Encryption with a customer-managed key (CMK) at scale
Azure Managed identity
System-Assigned-Resource-Identity		 True
Azure Resource Mover
Cross-ResourceGroup-Resource-Move		 True
Azure Resource Mover
Cross-Subscription-Resource-Move		 True
Azure Resource Tags
Tags		 True
Azure Extension
Extension		 False
Azure Private Endpoint
Private-Endpoint		 False
Azure Private Endpoint location Azure Private Endpoint location
Supported Locations for Private-Endpoint		 n/a
Non supported Locations for Private-Endpoint n/a
Azure location
Location		 True
Azure Resource type location Azure Resource type location
Locations		 Locations: 43
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Not locations Not locations: 54
asia, asiapacific, australia, australiacentral2, brazil, brazilsoutheast, brazilus, canada, centraluseuap, centralusstage, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, francesouth, germany, germanynorth, global, india, indonesia, israel, italy, japan, jioindiacentral, jioindiawest, korea, mexico, newzealand, northcentralusstage, norway, norwaywest, poland, qatar, singapore, southafrica, southafricawest, southcentralusstage, southcentralusstg, southeastasiastage, spain, sweden, switzerland, switzerlandwest, taiwan, uae, uaecentral, uk, unitedstates, unitedstateseuap, westus2stage, westusstage
Assessment tooling
Azure Advisor
Azure Advisor 		Azure Advisor recommendations: 79
• Cost [High] Right-size or shutdown underutilized virtual machines
• Cost [Medium] Mock recommendation type for Kusto-based ingestion
• HighAvailability [High] Migrate workload to D-series or better virtual machine
• HighAvailability [High] Standard_NC24rs_v3 virtual machine (VM) size in NCv3-series is being retired.
• HighAvailability [High] Update your outbound connectivity protocol to Service Tags for Azure Site Recovery
• HighAvailability [High] Upgrade to a newer offer of Virtual Machine image
• HighAvailability [High] Upgrade to a newer SKU of Virtual Machine image
• HighAvailability [High] Upgrade VM from Premium Unmanaged Disks to Managed Disks at no additional cost
• HighAvailability [High] Upgrade your deprecated Virtual Machine image to a newer image
• HighAvailability [High] Use Availability zones for better resiliency and availability
• HighAvailability [High] Use Azure Capacity Reservation for virtual machine (VM)
• HighAvailability [High] Validate Virtual Machine reliability with a Site Recovery test failover
• HighAvailability [Low] Convert Standard to Premium disk for higher uptime
• HighAvailability [Low] DNS Servers should be configured at the Virtual Network level
• HighAvailability [Medium] Add additional VM or use Premium disks for higher uptime
• HighAvailability [Medium] Azure unmanaged disks is being retired.
• HighAvailability [Medium] Enable Backups on your Virtual Machines
• HighAvailability [Medium] Enable virtual machine replication to protect applications from regional outage
• HighAvailability [Medium] Migrate to Virtual Machine Scale Sets Flex
• HighAvailability [Medium] Migrate workload to Virtual Machine Scale Sets Flex
• HighAvailability [Medium] Provide access to mandatory URLs missing for your Azure Virtual Desktop environment
• HighAvailability [Medium] Standard_M192idms_v2 is being retired.
• HighAvailability [Medium] Standard_M192ids_v2 is being retired.
• HighAvailability [Medium] Standard_M192ims_v2 is being retired.
• HighAvailability [Medium] Standard_M192is_v2 is being retired.
• HighAvailability [Medium] Upgrade to Standard SSD OS disk
• HighAvailability [Medium] Virtual machines in NCv3-series is being retired.
• OperationalExcellence [High] Enable Trusted Launch foundational excellence, and modern security for Existing Generation 2 VM(s)
• OperationalExcellence [High] In-Place Upgrade to Ubuntu Pro with zero downtime for Extended Security
• Performance [High] Upgrade the size of your most active virtual machines to prevent resource exhaustion and improve performance
• Performance [High] Use Managed disks to prevent disk I/O throttling
• Performance [High] Use SSD Disks for your production workloads
• Performance [Medium] Accelerated Networking may require stopping and starting the VM
• Performance [Medium] Another Mock recommendation type for Kusto-based ingestion.
• Performance [Medium] Enable Accelerated Networking to improve network performance and latency
• Performance [Medium] Improve user experience and connectivity by deploying VMs closer to user's location
• Performance [Medium] Match production Virtual Machines with Production Disk for consistent performance and better latency
• Performance [Medium] Take advantage of Ultra Disk low latency for your log disks and improve your database workload performance
• Performance [Medium] Update Automanage to the latest API Version
• Performance [Medium] Upgrade to the current generation virtual machines
• Security [High] All network ports should be restricted on network security groups associated to your virtual machine
• Security [High] Anti-Virus component in your EDR is off or partially configured
• Security [High] Anti-Virus component of your EDR uses outdated signatures
• Security [High] Anti-Virus scans of your EDR are out of 7 days
• Security [High] EDR configuration issues should be resolved on virtual machines
• Security [High] EDR solution should be installed on Virtual Machines
• Security [High] Internet-facing virtual machines should be protected with network security groups
• Security [High] Linux virtual machines should enable Azure Disk Encryption or EncryptionAtHost.
• Security [High] Machines should be configured to periodically check for missing system updates
• Security [High] Machines should have ports closed that might expose attack vectors
• Security [High] Machines should have secrets findings resolved
• Security [High] Management ports of virtual machines should be protected with just-in-time network access control
• Security [High] SQL servers on machines should have vulnerability findings resolved
• Security [High] System updates should be installed on your machines (powered by Azure Update Manager)
• Security [High] Virtual machines should be migrated to new Azure Resource Manager resources
• Security [High] Windows servers should be configured to use secure communication protocols
• Security [High] Windows virtual machines should enable Azure Disk Encryption or EncryptionAtHost.
• Security [Low] Azure Backup should be enabled for virtual machines
• Security [Low] Guest Attestation extension should be installed on supported Linux virtual machines
• Security [Low] Guest Attestation extension should be installed on supported Windows virtual machines
• Security [Low] Linux virtual machines should enforce kernel module signature validation
• Security [Low] Linux virtual machines should use only signed and trusted boot components
• Security [Low] Linux virtual machines should use Secure Boot
• Security [Low] Machines should be configured securely (powered by MDVM)
• Security [Low] Machines should be restarted to apply security configuration updates
• Security [Low] Machines should have vulnerability findings resolved
• Security [Low] Non-internet-facing virtual machines should be protected with network security groups
• Security [Low] Secure Boot should be enabled on supported Windows virtual machines
• Security [Low] vTPM should be enabled on supported virtual machines
• Security [Low] Vulnerabilities in security configuration on your Linux machines should be remediated (powered by Guest Configuration)
• Security [Low] Vulnerabilities in security configuration on your Windows machines should be remediated (powered by Guest Configuration)
• Security [Medium] Authentication to Linux machines should require SSH keys
• Security [Medium] Guest Configuration extension should be installed on machines
• Security [Medium] IP forwarding on your virtual machine should be disabled
• Security [Medium] Machines should have a vulnerability assessment solution
• Security [Medium] Management ports should be closed on your virtual machines
• Security [Medium] Virtual machines and virtual machine scale sets should have encryption at host enabled
• Security [Medium] Virtual machines guest attestation status should be healthy
• Security [Medium] Windows Defender Exploit Guard should be enabled on machines
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 (APRLv2) 		Azure Proactive Resilience Library v2 recommendations: 18
• DisasterRecovery [High] Validate VM functionality with a Site Recovery test failover to check performance at target
• DisasterRecovery [Medium] Replicate VMs using Azure Site Recovery
• DisasterRecovery [Medium] Reserve Compute Capacity in Disaster Recovery Regions
• DisasterRecovery [Medium] Backup VMs with Azure Backup service
• HighAvailability [High] Reserve Compute Capacity for critical workloads
• HighAvailability [High] Use maintenance configurations for the VMs
• HighAvailability [High] Run production workloads on two or more VMs using VMSS Flex
• HighAvailability [High] Use Managed Disks for VM disks
• HighAvailability [High] Migrate VMs using availability sets to VMSS Flex
• HighAvailability [High] Deploy VMs across Availability Zones
• HighAvailability [Medium] Use Azure Boost VMs for Maintenance sensitive workload
• HighAvailability [Medium] Enable Scheduled Events for Maintenance sensitive workload VMs
• MonitoringAndAlerting [Low] Enable VM Insights
• OtherBestPractices [Low] When AccelNet is enabled, you must manually update the GuestOS NIC driver
• OtherBestPractices [Medium] IP Forwarding should only be enabled for Network Virtual Appliances
• Scalability [High] Don't use A or B-Series VMs for production needing constant full CPU performance
• Scalability [High] Mission Critical Workloads should consider using Premium or Ultra Disks
• Scalability [Medium] Enable Accelerated Networking (AccelNet)
PSRule for Azure
PSRule for Azure 		PSRule for Azure rules: 19
• Cost Optimization [Awareness] Multi-tenant Hosting Rights
• Cost Optimization [Awareness] Use Azure Hybrid Benefit
• Cost Optimization [Awareness] Use current VM SKUs
• Cost Optimization [Important] VMs should not be stopped state
• Operational Excellence [Awareness] Use valid VM computer names
• Operational Excellence [Awareness] Use valid VM names
• Operational Excellence [Important] Migrate to Azure Monitor Agent
• Operational Excellence [Important] Use Azure Monitor Agent
• Operational Excellence [Important] Virtual Machine agent is not provisioned
• Performance Efficiency [Important] Configure host caching
• Performance Efficiency [Important] Configure Premium disks or above
• Reliability [Important] Associate a maintenance configuration
• Reliability [Important] Avoid Basic VM SKU
• Reliability [Important] Distributing traffic
• Reliability [Important] Use Managed Disks
• Reliability [Important] Virtual Machine is not configured for improved SLA
• Security [Important] Automatic updates are enabled
• Security [Important] Use Azure Disk Encryption
• Security [Important] VM password-based authentication is enabled
Azure Quick Review (AZQR)
Azure Quick Review (AZQR) 		Azure Quick Review (AZQR) recommendations: 25
• DisasterRecovery [Medium] Backup VMs with Azure Backup service
• DisasterRecovery [Medium] Replicate VMs using Azure Site Recovery
• Governance [Low] Ensure that your VMs are compliant with Azure Policies
• Governance [Low] Review VMs in stopped state
• Governance [Low] Virtual Machine Name should comply with naming conventions
• Governance [Low] Virtual Machine should have tags
• HighAvailability [High] Deploy VMs across Availability Zones
• HighAvailability [High] Migrate VMs using availability sets to VMSS Flex
• HighAvailability [High] Reserve Compute Capacity for critical workloads
• HighAvailability [High] Run production workloads on two or more VMs using VMSS Flex
• HighAvailability [High] Use maintenance configurations for the VMs
• HighAvailability [High] Use Managed Disks for VM disks
• HighAvailability [High] Virtual Machine should have a SLA
• MonitoringAndAlerting [Low] Configure monitoring for all Azure Virtual Machines
• MonitoringAndAlerting [Low] Enable VM Insights
• OtherBestPractices [Low] Customer DNS Servers should be configured in the Virtual Network level
• Scalability [High] Don't use A or B-Series VMs for production needing constant full CPU performance
• Scalability [High] Mission Critical Workloads should consider using Premium or Ultra Disks
• Scalability [Low] Host database data on a data disk
• Scalability [Medium] Enable Accelerated Networking (AccelNet)
• Security [High] Virtual Machines should have Azure Disk Encryption or EncryptionAtHost enabled
• Security [Low] Network access to the VM disk should be set to Disable public access and enable private access
• Security [Low] VM network interfaces and associated subnets both have a Network Security Group associated
• Security [Medium] IP Forwarding should only be enabled for Network Virtual Appliances
• Security [Medium] VMs should not have a Public IP directly associated
Infrastructure as Code (IaC)
ARM (Azure Resource Manager)
ARM (Azure Resource Manager) templates		 ARM (Azure Resource Manager) template API versions: 26
• latest
• 2024-11-01
• 2024-07-01
• 2024-03-01
• 2023-09-01
• 2023-07-01
• 2023-03-01
• 2022-11-01
• 2022-08-01
• 2022-03-01
• 2021-11-01
• 2021-07-01
• 2021-04-01
• 2021-03-01
• 2020-12-01
• 2020-06-01
• 2019-12-01
• 2019-07-01
• 2019-03-01
• 2018-10-01
• 2018-06-01
• 2018-04-01
• 2017-12-01
• 2017-03-30
• 2016-04-30-preview
• 2016-03-30
• 2015-06-15
Azure Bicep
Bicep templates		 Bicep template API versions: 26
• latest
• 2024-11-01
• 2024-07-01
• 2024-03-01
• 2023-09-01
• 2023-07-01
• 2023-03-01
• 2022-11-01
• 2022-08-01
• 2022-03-01
• 2021-11-01
• 2021-07-01
• 2021-04-01
• 2021-03-01
• 2020-12-01
• 2020-06-01
• 2019-12-01
• 2019-07-01
• 2019-03-01
• 2018-10-01
• 2018-06-01
• 2018-04-01
• 2017-12-01
• 2017-03-30
• 2016-04-30-preview
• 2016-03-30
• 2015-06-15
Terraform
Terraform provider 		Terraform providers: 6
• linux_virtual_machine
• virtual_machine
• virtual_machine_data_disk_attachment
• virtual_machine_gallery_application_assignment
• virtual_machine_implicit_data_disk_from_source
• windows_virtual_machine
AzAPI Terraform
AzAPI Terraform templates		 AzAPI Terraform template API versions: 26
• latest
• 2024-11-01
• 2024-07-01
• 2024-03-01
• 2023-09-01
• 2023-07-01
• 2023-03-01
• 2022-11-01
• 2022-08-01
• 2022-03-01
• 2021-11-01
• 2021-07-01
• 2021-04-01
• 2021-03-01
• 2020-12-01
• 2020-06-01
• 2019-12-01
• 2019-07-01
• 2019-03-01
• 2018-10-01
• 2018-06-01
• 2018-04-01
• 2017-12-01
• 2017-03-30
• 2016-04-30-preview
• 2016-03-30
• 2015-06-15
Pulumi
Pulumi provider 		Pulumi providers: 1
• compute/virtualmachine
OpenTofu
OpenTofu provider 		OpenTofu TF providers: 6
• linux_virtual_machine
• virtual_machine
• virtual_machine_data_disk_attachment
• virtual_machine_gallery_application_assignment
• virtual_machine_implicit_data_disk_from_source
• windows_virtual_machine
Azure Verified Modules (AVM) Bicep Azure Verified Modules (AVM) Bicep
Azure Verified Modules (AVM) Bicep 		Virtual Machine
Azure Verified Modules (AVM) Terraform Azure Verified Modules (AVM) Terraform
Azure Verified Modules (AVM) Terraform 		• GitHub: Virtual Machine
• Terraform registry: Virtual Machine
REST-API (Representational State Transfer - Application Programming Interface)
REST-API versions REST-API versions: 28
• 2024-11-01
• 2024-07-01
• 2024-03-01
• 2023-09-01
• 2023-07-01
• 2023-03-01
• 2022-11-01
• 2022-08-01
• 2022-03-01
• 2021-11-01
• 2021-07-01
• 2021-04-01
• 2021-03-01
• 2020-12-01
• 2020-06-01
• 2019-12-01
• 2019-07-01
• 2019-03-01
• 2018-10-01
• 2018-06-01
• 2018-04-01
• 2017-12-01
• 2017-03-30
• 2016-08-30
• 2016-04-30-preview
• 2016-03-30
• 2015-06-15
• 2015-05-01-preview
REST-API version default 2023-09-01
API profiles API profiles: 6
• 2020-06-01
• 2017-12-01;2020-09-01-hybrid
• 2017-12-01;2019-03-01-hybrid
• 2017-03-30;2018-06-01-profile
• 2017-03-09-profile
• 2016-03-30;2018-03-01-hybrid
Resource naming
Azure Naming Tool
Azure Naming Tool 		The Azure Naming Tool was created to help administrators define and manage their naming conventions, while providing a simple interface for users to generate a compliant name.
Resource naming details 
[
  {
    "property": "Linux",
    "ShortName": "vm",
    "scope": "resource group",
    "lengthMin": "1",
    "lengthMax": "64",
    "validText": "",
    "invalidText": "Backslash, slash, double quote, single quote, square brackets, colon, pipe, angle brackets, plus sign, equals sign, semi-colon, comma, question mark, asterisk, at sign, ampersand, and underscore. Can't end with period or hyphen.",
    "invalidCharacters": "\\/\\'[]:|<>+=;,?*@&_\"",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": ".-",
    "invalidCharactersConsecutive": "",
    "regx": "^(?!.*[.]$)(?!.*-$)[^\\/\\[\\]:|<>\\+=;,\\?@&_\\*]{1,64}$",
    "staticValues": ""
  },
  {
    "property": "Windows",
    "ShortName": "vm",
    "scope": "resource group",
    "lengthMin": "1",
    "lengthMax": "15",
    "validText": "",
    "invalidText": "Backslash, slash, double quote, single quote, square brackets, colon, pipe, angle brackets, plus sign, equals sign, semi-colon, comma, question mark, asterisk, at sign, ampersand, and underscore. Can't include space or period. Can't end with hyphen.",
    "invalidCharacters": "/\\'[]:|<>+=;,?*@&_ .\"",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": "-",
    "invalidCharactersConsecutive": "",
    "regx": "^(?!.*-$)[^\\/\\[\\]:|<>\\+=;,\\?@&_\\. \\*]{1,15}$",
    "staticValues": ""
  }
]