steampipe plugin install azuresteampipe plugin install azure

Table: azure_storage_sync - Query Azure Storage Sync Services using SQL

Azure Storage Sync Service is a feature within Microsoft Azure that enables synchronization of data across different Azure File shares. It allows for centralizing file services in Azure while maintaining local access to data. The service provides multi-site access, cloud tiering, integrated management, and change detection.

Table Usage Guide

The azure_storage_sync table provides insights into Azure Storage Sync Services within Microsoft Azure. As a DevOps engineer, explore synchronization details through this table, including the sync group, registered servers, and associated metadata. Utilize it to uncover information about the synchronization status, such as those with pending synchronization, the relationships between servers, and the verification of synchronization activities.

Examples

Basic info

Determine the areas in which Azure's storage synchronization service is being utilized, along with its provisioning status. This can be useful for understanding the distribution and status of storage sync services across your Azure environment.

select
  name,
  id,
  type,
  provisioning_state
from
  azure_storage_sync;

select
  name,
  id,
  type,
  provisioning_state
from
  azure_storage_sync;

List storage sync which allows traffic through private endpoints only

Identify Azure storage syncs configured to accept incoming traffic solely through private network endpoints. This can be useful for maintaining security by ensuring data is only accessible within specific, controlled network environments.

select
  name,
  id,
  type,
  provisioning_state,
  incoming_traffic_policy
from
  azure_storage_sync
where
  incoming_traffic_policy = 'AllowVirtualNetworksOnly';

select
  name,
  id,
  type,
  provisioning_state,
  incoming_traffic_policy
from
  azure_storage_sync
where
  incoming_traffic_policy = 'AllowVirtualNetworksOnly';

List private endpoint connection details for accounts

This query allows you to explore the details of private endpoint connections associated with your accounts. It's particularly useful for gaining insights into the connection state and type, which can help assess the security and functionality of your data synchronization service.

select
  name,
  id,
  connections ->> 'ID' as connection_id,
  connections ->> 'Name' as connection_name,
  connections ->> 'PrivateEndpointPropertyID' as property_private_endpoint_id,
  jsonb_pretty(connections -> 'PrivateLinkServiceConnectionState') as property_private_link_service_connection_state,
  connections ->> 'Type' as connection_type
from
  azure_storage_sync,
  jsonb_array_elements(private_endpoint_connections) as connections;

select
  name,
  s.id,
  json_extract(connections.value, '$.ID') as connection_id,
  json_extract(connections.value, '$.Name') as connection_name,
  json_extract(connections.value, '$.PrivateEndpointPropertyID') as property_private_endpoint_id,
  connections.value as property_private_link_service_connection_state,
  json_extract(connections.value, '$.Type') as connection_type
from
  azure_storage_sync as s,
  json_each(private_endpoint_connections) as connections;

Control examples

Azure File Sync should use private link

Schema for azure_storage_sync

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form, e.g. connection_name.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
cloud_environment	text		The Azure Cloud Environment.
id	text		Fully qualified resource id for the resource.
incoming_traffic_policy	text		The incoming traffic policy of the storage sync service. Possible values include: 'AllowAllTraffic', 'AllowVirtualNetworksOnly'.
last_operation_name	text		The last operation name of the storage sync service.
last_workflow_id	text		The last workflow id of the storage sync service.
name	text	=	The name of the resource.
private_endpoint_connections	jsonb		List of private endpoint connection associated with the specified storage sync service.
provisioning_state	text		The provisioning state of the storage sync service.
region	text		The Azure region/location in which the resource is located.
resource_group	text	=	The resource group which holds this resource.
storage_sync_service_status	bigint		The status of the storage sync service.
storage_sync_service_uid	text		The uid of the storage sync service.
subscription_id	text		The Azure Subscription ID in which the resource is located.
tags	jsonb		A map of tags for the resource.
title	text		Title of the resource.
type	text		The type of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- azure

You can pass the configuration to the command with the --config argument:

steampipe_export_azure --config '<your_config>' azure_storage_sync