Table: azure_automation_variable - Query Azure Automation Variables using SQL
Azure Automation is a cloud-based service offered by Microsoft Azure that allows organizations to automate and configure certain tasks across their Azure and non-Azure environments. It provides a way to manage, monitor, and act upon the infrastructure resources in a scalable and reliable manner. Azure Automation Variables are entities within this service that store values which can be used in runbooks, DSC configurations, and other features of Azure Automation.
Table Usage Guide
The azure_automation_variable
table provides insights into Azure Automation Variables within Azure Automation. As a DevOps engineer, explore variable-specific details through this table, including the type of value it holds, whether it is encrypted, and its associated metadata. Utilize it to uncover information about variables, such as their current values, and the automation accounts they are associated with.
Examples
Basic info
Analyze the settings to understand the encryption status of variables in your Azure automation accounts. This will help in assessing the security posture of your automation workflows.
select id, name, account_name, type, is_encrypted, valuefrom azure_automation_variable;
select id, name, account_name, type, is_encrypted, valuefrom azure_automation_variable;
List variables that are unencrypted
Discover the segments that are unencrypted within your Azure Automation variables. This can be beneficial in identifying potential security risks and ensuring data protection standards are met.
select id, name, account_name, type, is_encrypted, valuefrom azure_automation_variablewhere not is_encrypted;
select id, name, account_name, type, is_encrypted, valuefrom azure_automation_variablewhere not is_encrypted;
List variables created in last 30 days
Explore the recent changes in your Azure Automation environment by identifying variables that were created within the last 30 days. This can help you monitor and control your automation tasks, ensuring they align with your current needs and standards.
select id, name, account_name, creation_time, type, is_encrypted, valuefrom azure_automation_variablewhere creation_time >= now() - interval '30' day;
select id, name, account_name, creation_time, type, is_encrypted, valuefrom azure_automation_variablewhere creation_time >= datetime('now', '-30 day');
Get details of a variable
Discover the specifics of a particular variable within a given account and resource group. This is useful in understanding the variable's attributes, such as its type and encryption status, which can aid in managing and securing your Azure automation tasks.
select id, name, account_name, type, is_encrypted, valuefrom azure_automation_variablewhere account_name = 'turbot_account' and name = 'turbot' and resource_group = 'turbot_rg';
select id, name, account_name, type, is_encrypted, valuefrom azure_automation_variablewhere account_name = 'turbot_account' and name = 'turbot' and resource_group = 'turbot_rg';
Control examples
Schema for azure_automation_variable
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
account_name | text | = | The name of the account. |
akas | jsonb | Array of globally unique identifier strings (also known as) for the resource. | |
cloud_environment | text | The Azure Cloud Environment. | |
creation_time | timestamp with time zone | The creation time of the variable. | |
description | text | The description for the variable. | |
id | text | Fully qualified resource ID. | |
is_encrypted | boolean | The encrypted flag of the variable. | |
last_modified_time | timestamp with time zone | The last modified time of the variable. | |
name | text | = | The name of the resource. |
resource_group | text | = | The resource group which holds this resource. |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
subscription_id | text | =, !=, ~~, ~~*, !~~, !~~* | The Azure Subscription ID in which the resource is located. |
title | text | Title of the resource. | |
type | text | The type of the resource. | |
value | text | The value of the variable. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- azure
You can pass the configuration to the command with the --config
argument:
steampipe_export_azure --config '<your_config>' azure_automation_variable