turbot/azure

steampipe plugin install azuresteampipe plugin install azure
azure_ad_groupazure_ad_service_principalazure_ad_userazure_api_managementazure_app_service_environmentazure_app_service_function_appazure_app_service_planazure_app_service_web_appazure_application_security_groupazure_batch_accountazure_compute_availability_setazure_compute_diskazure_compute_disk_encryption_setazure_compute_disk_metric_read_opsazure_compute_disk_metric_read_ops_dailyazure_compute_disk_metric_read_ops_hourlyazure_compute_disk_metric_write_opsazure_compute_disk_metric_write_ops_dailyazure_compute_disk_metric_write_ops_hourlyazure_compute_imageazure_compute_resource_skuazure_compute_snapshotazure_compute_virtual_machineazure_compute_virtual_machine_metric_cpu_utilizationazure_compute_virtual_machine_metric_cpu_utilization_dailyazure_compute_virtual_machine_metric_cpu_utilization_hourlyazure_compute_virtual_machine_scale_setazure_container_registryazure_cosmosdb_accountazure_cosmosdb_mongo_databaseazure_cosmosdb_sql_databaseazure_data_factoryazure_data_factory_datasetazure_data_factory_pipelineazure_data_lake_analytics_accountazure_data_lake_storeazure_diagnostic_settingazure_eventhub_namespaceazure_express_route_circuitazure_firewallazure_iothubazure_key_vaultazure_key_vault_deleted_vaultazure_key_vault_keyazure_key_vault_managed_hardware_security_moduleazure_key_vault_secretazure_kubernetes_clusterazure_lbazure_lb_backend_address_poolazure_lb_nat_ruleazure_lb_outbound_ruleazure_lb_probeazure_lb_ruleazure_locationazure_log_alertazure_log_profileazure_logic_app_workflowazure_management_lockazure_mariadb_serverazure_mssql_elasticpoolazure_mssql_managed_instanceazure_mysql_serverazure_network_interfaceazure_network_security_groupazure_network_watcherazure_network_watcher_flow_logazure_policy_assignmentazure_policy_definitionazure_postgresql_serverazure_providerazure_public_ipazure_recovery_services_vaultazure_redis_cacheazure_resource_groupazure_resource_linkazure_role_assignmentazure_role_definitionazure_route_tableazure_search_serviceazure_security_center_auto_provisioningazure_security_center_contactazure_security_center_jit_network_access_policyazure_security_center_settingazure_security_center_subscription_pricingazure_servicebus_namespaceazure_sql_databaseazure_sql_serverazure_storage_accountazure_storage_blobazure_storage_blob_serviceazure_storage_containerazure_storage_queueazure_storage_tableazure_storage_table_serviceazure_stream_analytics_jobazure_subnetazure_subscriptionazure_tenantazure_virtual_networkazure_virtual_network_gateway

Table: azure_subnet

A subnet is a range of IP addresses in the VNet. You can divide a VNet into multiple subnets for organization and security

Examples

Virtual network and IP address range of each subnet

select
name,
virtual_network_name,
address_prefix,
location,
resource_group
from
azure_subnet;

Route table associated with each subnet

select
st.name subnet_name,
st.virtual_network_name,
rt.name route_table_name,
jsonb_array_elements(rt.routes) -> 'properties' ->> 'addressPrefix' as route_address_prefix,
jsonb_array_elements(rt.routes) -> 'properties' ->> 'nextHopType' as route_next_hop_type
from
azure_route_table as rt
join azure_subnet st on rt.id = st.route_table_id;

Network security group associated with each subnet

select
name subnet_name,
virtual_network_name,
split_part(network_security_group_id, '/', 9) as network_security_name
from
azure_subnet;

Service endpoints info of each subnet

select
name,
endpoint -> 'locations' as location,
endpoint -> 'service' as service
from
azure_subnet
cross join jsonb_array_elements(service_endpoints) as endpoint;

.inspect azure_subnet

Azure Subnet

NameTypeDescription
address_prefixtextContains the address prefix for the subnet.
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
delegationsjsonbA list of references to the delegations on the subnet.
etagtextAn unique read-only string that changes whenever the resource is updated.
idtextContains ID to identify a subnet uniquely.
nametextThe friendly name that identifies the subnet.
nat_gateway_idtextThe ID of the Nat gateway associated with the subnet.
network_security_group_idtextNetwork security group associated with the subnet.
private_endpoint_network_policiestextEnable or Disable apply network policies on private end point in the subnet.
private_link_service_network_policiestextEnable or Disable apply network policies on private link service in the subnet.
provisioning_statetextThe provisioning state of the subnet resource.
resource_grouptextThe resource group which holds this resource.
route_table_idtextRoute table associated with the subnet.
service_endpoint_policiesjsonbA list of service endpoint policies.
service_endpointsjsonbA list of service endpoints.
subscription_idtextThe Azure Subscription ID in which the resource is located.
titletextTitle of the resource.
typetextType of the resource.
virtual_network_nametextThe friendly name of the virtual network in which the subnet is created.