turbot/azure

steampipe plugin install azuresteampipe plugin install azure
azure_ad_groupazure_ad_service_principalazure_ad_userazure_api_managementazure_app_service_environmentazure_app_service_function_appazure_app_service_planazure_app_service_web_appazure_application_security_groupazure_compute_availability_setazure_compute_diskazure_compute_disk_encryption_setazure_compute_disk_metric_read_opsazure_compute_disk_metric_read_ops_dailyazure_compute_disk_metric_read_ops_hourlyazure_compute_disk_metric_write_opsazure_compute_disk_metric_write_ops_dailyazure_compute_disk_metric_write_ops_hourlyazure_compute_imageazure_compute_resource_skuazure_compute_snapshotazure_compute_virtual_machineazure_compute_virtual_machine_metric_cpu_utilizationazure_compute_virtual_machine_metric_cpu_utilization_dailyazure_compute_virtual_machine_metric_cpu_utilization_hourlyazure_cosmosdb_accountazure_cosmosdb_mongo_databaseazure_cosmosdb_sql_databaseazure_data_factoryazure_data_factory_datasetazure_data_factory_pipelineazure_diagnostic_settingazure_express_route_circuitazure_firewallazure_key_vaultazure_key_vault_keyazure_key_vault_secretazure_kubernetes_clusterazure_locationazure_log_alertazure_log_profileazure_management_lockazure_mysql_serverazure_network_interfaceazure_network_security_groupazure_network_watcherazure_network_watcher_flow_logazure_policy_assignmentazure_policy_definitionazure_postgresql_serverazure_providerazure_public_ipazure_resource_groupazure_role_assignmentazure_role_definitionazure_route_tableazure_security_center_auto_provisioningazure_security_center_contactazure_security_center_settingazure_security_center_subscription_pricingazure_sql_databaseazure_sql_serverazure_storage_accountazure_storage_blobazure_storage_blob_serviceazure_storage_containerazure_storage_queueazure_storage_tableazure_storage_table_serviceazure_subnetazure_subscriptionazure_tenantazure_virtual_networkazure_virtual_network_gateway

Table: azure_virtual_network

A virtual network is a network where all devices, servers, virtual machines, and data centers that are connected are done so through software and wireless technology.

Examples

List of virtual networks where DDoS(Distributed Denial of Service attacks) Protection is not enabled

select
name,
enable_ddos_protection,
location,
resource_group
from
azure_virtual_network
where
not enable_ddos_protection;

CIDR list for each virtual network

select
name,
jsonb_array_elements_text(address_prefixes) as address_block
from
azure_virtual_network;

List VPCs with public CIDR blocks

select
name,
cidr_block,
location,
resource_group
from
azure_virtual_network
cross join jsonb_array_elements_text(address_prefixes) as cidr_block
where
not cidr_block :: cidr < <= '10.0.0.0/16'
and not cidr_block :: cidr < <= '192.168.0.0/16'
and not cidr_block :: cidr < <= '172.16.0.0/12';

Subnet details associated with the virtual network

select
name,
subnet ->> 'name' as subnet_name,
subnet -> 'properties' ->> 'addressPrefix' as address_prefix,
subnet -> 'properties' ->> 'privateEndpointNetworkPolicies' as private_endpoint_network_policies,
subnet -> 'properties' ->> 'privateLinkServiceNetworkPolicies' as private_link_service_network_policies,
subnet -> 'properties' ->> 'serviceEndpoints' as service_endpoints,
split_part(subnet -> 'properties' ->> 'routeTable', '/', 9) as route_table
from
azure_virtual_network
cross join jsonb_array_elements(subnets) as subnet;

.inspect azure_virtual_network

Azure Virtual Network

NameTypeDescription
address_prefixesjsonbA list of address blocks reserved for this virtual network in CIDR notation
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
enable_ddos_protectionbooleanIndicates if DDoS protection is enabled for all the protected resources in the virtual network
enable_vm_protectionbooleanIndicates if VM protection is enabled for all the subnets in the virtual network
etagtextAn unique read-only string that changes whenever the resource is updated
idtextContains ID to identify a virtual network uniquely
nametextThe friendly name that identifies the virtual network
network_peeringsjsonbA list of peerings in a Virtual Network
provisioning_statetextThe provisioning state of the virtual network resource
regiontextThe Azure region/location in which the resource is located.
resource_grouptextThe resource group which holds this resource.
resource_guidtextThe resourceGuid property of the Virtual Network resource
subnetsjsonbA list of subnets in a Virtual Network
subscription_idtextThe Azure Subscription ID in which the resource is located.
tagsjsonbA map of tags for the resource.
titletextTitle of the resource.
typetextType of the resource