Azure

Azure is Microsoft's comprehensive cloud computing platform that provides infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) solutions. This data integration platform enables querying and monitoring of Azure cloud resources, services, and configurations for security analysis, compliance auditing, cost management, inventory tracking, and operational monitoring.

Category	Cloud
Direction	Query source
Sign-in	Client Secret, Resource Owner Password Authentication
Query languages	SQLite
Tables	175
Query templates	653
Website	http://azure.com

Before you start

Huntbase can sign in to Azure with any of these methods: Client Secret, Resource Owner Password Authentication. Pick one, create the credential in Azure, then keep it to hand for the Connect step.

Client Secret

Client secret authentication using Azure AD application credentials (client ID and client secret).

1. In the Microsoft Entra admin center, go to Entra ID › App registrations and select New registration. Under Supported account types, select Accounts in this organizational directory only, then select Register.
2. On the app's overview page, copy the Directory (tenant) ID and Application (client) ID.
3. Select Certificates & secrets › Client secrets › New client secret, add a description and duration, and select Add. Copy the secret value now: it is only displayed once.
4. In the Azure portal, open Subscriptions, select the subscription, then go to Access control (IAM) › Add › Add role assignment.
5. Assign the Reader role to the app (on the Members tab, choose User, group, or service principal and search for the app by name), then select Review + assign.

Permissions:

• Reader on the subscription
• Reader and Data Access on the subscription, only if you want to list storage account keys

Watch out for

• The role assignment must be on the subscription you enter in Azure Subscription ID. Registering the app alone grants no access to resources.

For the vendor's own instructions, see Microsoft guide to registering an app and creating a service principal.

tip

Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.

Connect Azure

1. Go to Connections and click New connection, or click New connection on the Azure product page.
2. On Product, pick Azure and choose the Owner.
3. On Details, give the connection a Name and, optionally, a Description.
4. On Connect, fill in the settings and credentials described below.
5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings

Where your Azure lives:

Field	Required	Notes
Azure Environment	No	Leave empty for the public cloud. Other valid values are AZURECHINACLOUD and AZUREUSGOVERNMENTCLOUD (the default is AZUREPUBLICCLOUD). One of AZUREPUBLICCLOUD, AZURECHINACLOUD, AZUREUSGOVERNMENTCLOUD, AZUREGERMANCLOUD. Defaults to AZUREPUBLICCLOUD.
Azure Tenant ID	Yes	The Directory (tenant) ID from the app registration overview page.
Azure Subscription ID	Yes	The subscription to query. Each connection covers a single subscription.

Credentials

Choose a Method, enter a Credential label (for example Production), then fill in the fields for that method.

Client Secret

Field	Required	Notes
Azure Client ID	Yes	The Application (client) ID from the app registration overview page. Secret — not shown again after you save it.
Azure Client Secret	Yes	The secret Value, not the secret ID. Secret — not shown again after you save it.

Resource Owner Password Authentication

Field	Required	Notes
Azure Client ID	Yes	The Application (client) ID from the app registration overview page. Secret — not shown again after you save it.
Username	Yes	Secret — not shown again after you save it.
Password	Yes	Secret — not shown again after you save it.

Query it

Once connected, Azure can serve these languages in a query tab, and Scout can use it when you ask in Auto:

Language	Use it for
SQLite	SQL over the 175 tables listed below, alongside every other connected source.

Example: SQLite

Display name of each Azure location — Explore which Azure locations are available by displaying their names.

select
  name,
  display_name
from
  azure_location;

Azure ships with 653 query templates. Find them in Library › Queries — see Query templates.

What syncs automatically

Azure comes with a content pack. These queries run on a schedule on each new connection so the entities they find appear in the Activity Feed without you asking. You can turn syncing off from the connection's Synchronisation Settings card.

Query	Finds
Sync role assignments	authorization, user
Sync virtual machines	device, os, product
Sync subscriptions	account, organization
Sync storage accounts	account, location
Sync publicly accessible storage containers	account, databucket

Tables

Azure adds 175 tables. Browse their columns from Schema in the query bar's ⋯ menu.

All 175 tables

Table	Contains
azure_alert_management	Azure Alert Management Service
azure_api_management	Azure API Management Service
azure_api_management_backend	Azure API Management Backend
azure_app_configuration	Azure App Configuration
azure_app_service_environment	Azure App Service Environment
azure_app_service_function_app	Azure App Service Function App
azure_app_service_plan	Azure App Service Plan
azure_app_service_web_app	Azure App Service Web App
azure_app_service_web_app_slot	Azure App Service Web App Slot
azure_application_gateway	Azure Application Gateway
azure_application_insight	Azure Application Insight
azure_application_security_group	Azure Application Security Group
azure_automation_account	Azure Automation Account
azure_automation_variable	Azure Automation Variable
azure_backup_policy	Azure Backup Policy
azure_bastion_host	Azure Bastion Host
azure_batch_account	Azure Batch Account
azure_cdn_frontdoor_custom_domain	Azure CDN Front Door Custom Domain
azure_cdn_frontdoor_profile	Azure CDN Front Door Profile
azure_cognitive_account	Azure Cognitive Account
azure_compute_availability_set	Azure Compute Availability Set
azure_compute_disk	Azure Compute Disk
azure_compute_disk_access	Azure Compute Disk Access
azure_compute_disk_encryption_set	Azure Compute Disk Encryption Set
azure_compute_disk_metric_read_ops	Azure Compute Disk Metrics - Read Ops
azure_compute_disk_metric_read_ops_daily	Azure Compute Disk Metrics - Read Ops (Daily)
azure_compute_disk_metric_read_ops_hourly	Azure Compute Disk Metrics - Read Ops (Hourly)
azure_compute_disk_metric_write_ops	Azure Compute Disk Metrics - Write Ops
azure_compute_disk_metric_write_ops_daily	Azure Compute Disk Metrics - Write Ops (Daily)
azure_compute_disk_metric_write_ops_hourly	Azure Compute Disk Metrics - Write Ops (Hourly)
azure_compute_image	Azure Compute Image
azure_compute_resource_sku	Azure Compute Resource SKU
azure_compute_snapshot	Azure Compute Snapshot
azure_compute_ssh_key	Azure Compute SSH Key
azure_compute_virtual_machine	Azure Compute Virtual Machine
azure_compute_virtual_machine_metric_available_memory	Azure Compute Virtual Machine Metrics - Memory Available Utilization
azure_compute_virtual_machine_metric_available_memory_daily	Azure Compute Virtual Machine Metrics - Memory Available Utilization (Daily)
azure_compute_virtual_machine_metric_available_memory_hourly	Azure Compute Virtual Machine Metrics - Memory Available Utilization (Hourly)
azure_compute_virtual_machine_metric_cpu_utilization	Azure Compute Virtual Machine Metrics - CPU Utilization
azure_compute_virtual_machine_metric_cpu_utilization_daily	Azure Compute Virtual Machine Metrics - CPU Utilization (Daily)
azure_compute_virtual_machine_metric_cpu_utilization_hourly	Azure Compute Virtual Machine Metrics - CPU Utilization (Hourly)
azure_compute_virtual_machine_scale_set	Azure Compute Virtual Machine Scale Set
azure_compute_virtual_machine_scale_set_network_interface	Azure Compute Virtual Machine Scale Set Network Interface
azure_compute_virtual_machine_scale_set_vm	Azure Compute Virtual Machine Scale Set VM
azure_compute_virtual_machine_size	Azure Compute Virtual Machine Size
azure_consumption_usage	Azure Consumption Usage
azure_container_group	Azure Container Group
azure_container_registry	Azure Container Registry
azure_cosmosdb_account	Azure Cosmos DB Account
azure_cosmosdb_mongo_collection	Azure Cosmos DB Mongo Collection
azure_cosmosdb_mongo_database	Azure Cosmos DB Mongo Database
azure_cosmosdb_restorable_database_account	Azure Cosmos DB Restorable Database Account
azure_cosmosdb_sql_database	Azure Cosmos DB SQL Database
azure_cost_by_resource_group_daily	Azure Cost Management - Daily cost by resource group
azure_cost_by_resource_group_monthly	Azure Cost Management - Cost by Resource Group (Monthly)
azure_cost_by_service_daily	Azure Cost Management - Daily cost by service
azure_cost_by_service_monthly	Azure Cost Management - Cost by Service (Monthly)
azure_cost_forecast_daily	Azure Cost Management - Daily cost forecast
azure_cost_forecast_monthly	Azure Cost Management - Monthly cost forecast
azure_cost_usage	Azure Cost Management - Cost and Usage with flexible dimensions
azure_data_factory	Azure Data Factory
azure_data_factory_dataset	Azure Data Factory Dataset
azure_data_factory_pipeline	Azure Data Factory Pipeline
azure_data_lake_analytics_account	Azure Data Lake Analytics Account
azure_data_lake_store	Azure Data Lake Store
azure_data_protection_backup_job	Azure Data Protection Backup Job
azure_data_protection_backup_vault	Azure Data Protection Backup Vault
azure_databox_edge_device	Azure Data Box Edge Device
azure_databricks_workspace	Azure Databricks Workspace
azure_diagnostic_setting	Azure Diagnostic Setting
azure_dns_zone	Azure DNS Zone
azure_eventgrid_domain	Azure Event Grid Domain
azure_eventgrid_topic	Azure Event Grid Topic
azure_eventhub_namespace	Azure Event Hub Namespace
azure_express_route_circuit	Azure Express Route Circuit
azure_firewall	Azure Firewall
azure_firewall_policy	Azure Firewall Policy
azure_frontdoor	Azure Front Door
azure_hdinsight_cluster	Azure HDInsight Cluster
azure_healthcare_service	Azure Healthcare Service
azure_hpc_cache	Azure HPC Cache
azure_hybrid_compute_machine	Azure Hybrid Compute Machine
azure_hybrid_kubernetes_connected_cluster	Azure Hybrid Kubernetes Connected Cluster
azure_iothub	Azure Iot Hub
azure_iothub_dps	Azure IoT Hub Device Provisioning Service
azure_key_vault	Azure Key Vault
azure_key_vault_certificate	Azure Key Vault Certificate
azure_key_vault_deleted_vault	Azure Key Vault Deleted Vault
azure_key_vault_key	Azure Key Vault Key
azure_key_vault_key_version	Azure Key Vault Key Version
azure_key_vault_managed_hardware_security_module	Azure Key Vault Managed Hardware Security Module
azure_key_vault_secret	Azure Key Vault Secret
azure_kubernetes_cluster	Azure Kubernetes Cluster
azure_kubernetes_service_version	Azure Kubernetes Service Version
azure_kusto_cluster	Azure Kusto Cluster
azure_lb	Azure Load Balancer
azure_lb_backend_address_pool	Azure Load Balancer Backend Address Pool
azure_lb_nat_rule	Azure Load Balancer Nat Rule
azure_lb_outbound_rule	Azure Load Balancer Outbound Rule
azure_lb_probe	Azure Load Balancer Probe
azure_lb_rule	Azure Load Balancer Rule
azure_lighthouse_assignment	Azure Lighthouse Assignment
azure_lighthouse_definition	Azure Lighthouse Definition
azure_location	Azure Location
azure_log_alert	Azure Log Alert
azure_log_analytics_workspace	Azure Log Analytics Workspace
azure_log_profile	Azure Log Profile
azure_logic_app_workflow	Azure Logic App Workflow
azure_machine_learning_workspace	Azure Machine Learning Workspace
azure_maintenance_configuration	Azure Maintenance Configuration
azure_management_group	Azure Management Group.
azure_management_lock	Azure Management Lock
azure_mariadb_server	Azure MariaDB Server
azure_monitor_activity_log_event	Azure Monitor Activity Log Event
azure_monitor_log_profile	Azure Monitor Log Profile
azure_mssql_elasticpool	Azure Microsoft SQL Elastic Pool
azure_mssql_managed_instance	Azure Microsoft SQL Managed Instance
azure_mssql_virtual_machine	Azure MS SQL Virtual Machine
azure_mysql_flexible_server	Azure MySQL Flexible Server
azure_mysql_server	Azure MySQL Server
azure_nat_gateway	Azure NAT Gateway
azure_network_interface	Azure Network Interface
azure_network_profile	Azure Network Profile
azure_network_security_group	Azure Network Security Group
azure_network_watcher	Azure Network Watcher
azure_network_watcher_flow_log	Azure Network Watcher Flow Log
azure_policy_assignment	Azure Policy Assignment
azure_policy_definition	Azure Policy Definition
azure_postgresql_flexible_server	Azure PostgreSQL Flexible Server
azure_postgresql_server	Azure PostgreSQL Server
azure_private_dns_zone	Azure Private DNS Zone
azure_private_endpoint	Azure Private Endpoint
azure_provider	Azure Provider
azure_public_ip	Azure Public IP
azure_recovery_services_backup_job	Azure Recovery Services Backup Job
azure_recovery_services_vault	Azure Recovery Services Vault
azure_redis_cache	Azure Redis Cache
azure_resource	Azure Resource
azure_resource_graph	Execute an Azure Resource Graph query and return the results as rows.
azure_resource_group	Azure Resource Group
azure_resource_link	Azure Resource Link
azure_role_assignment	Azure Role Assignment
azure_role_definition	Azure Role Definition
azure_route_table	Azure Route Table
azure_search_service	Azure Search Service
azure_security_center_auto_provisioning	Azure Security Center Auto Provisioning
azure_security_center_automation	Azure Security Center Automation
azure_security_center_contact	Azure Security Center Contact
azure_security_center_jit_network_access_policy	Azure Security Center JIT Network Access Policy
azure_security_center_setting	Azure Security Center Setting
azure_security_center_sub_assessment	Azure Security Center Sub Assessment
azure_security_center_subscription_pricing	Azure Security Center Subscription Pricing
azure_service_fabric_cluster	Azure Service Fabric Cluster
azure_servicebus_namespace	Azure ServiceBus Namespace
azure_signalr_service	Azure SignalR Service
azure_spring_cloud_service	Azure Spring Cloud Service
azure_sql_database	Azure SQL Database
azure_sql_server	Azure SQL Server
azure_storage_account	Azure Storage Account
azure_storage_blob	Azure Storage Blob
azure_storage_blob_service	Azure Storage Blob Service
azure_storage_container	Azure Storage Container
azure_storage_queue	Azure Storage Queue
azure_storage_share_file	Azure Storage Share File
azure_storage_sync	Azure Storage Sync
azure_storage_table	Azure Storage Table
azure_storage_table_service	Azure Storage Table Service
azure_stream_analytics_job	Azure Stream Analytics Job
azure_subnet	Azure Subnet
azure_subscription	Azure Subscription
azure_synapse_workspace	Azure Synapse Workspace
azure_tenant	Azure Tenant
azure_virtual_network	Azure Virtual Network
azure_virtual_network_gateway	Azure Virtual Network Gateway
azure_web_application_firewall_policy	Azure Web Application Firewall Policy

Next steps

• Connections — health, credentials and settings after you connect
• Query languages — syntax, parameters and time ranges
• Chatting with Scout — ask questions without writing a query
• All integrations — the rest of the catalog