Overview

Azure Quick Review — Analyze Azure resources and identify whether they comply with Azure’s best practices and recommendations.

Azure Quick Review (azqr) is a powerful command-line interface (CLI) tool that specializes in analyzing Azure resources to ensure compliance with Azure’s best practices and recommendations. Its main objective is to offer users a comprehensive overview of their Azure resources, allowing them to easily identify any non-compliant configurations or areas for improvement.

Azure Quick Review Recommendations

Azure Quick Review (azqr) scans your resources with 2 types of recommendations:

To learn more about the recommendations used by Azure Quick Review (azqr), you can refer to the documentation available here.

Scan Results

The output generated by Azure Quick Review (azqr) is written by default to an Excel file, which contains the following sheets:

Core Sheets (always generated)

  • Recommendations: Action plan listing all recommendations with the count of impacted resources.
  • ImpactedResources: Resources that have issues to address.
  • ResourceTypes: Summary of impacted resource types.
  • Inventory: All scanned resources with details (SKU, Tier, Kind, calculated SLA).
  • OutOfScope: Resources that were not scanned.

Optional Sheets (enabled by default)

  • Advisor: Recommendations from Azure Advisor. Disable with --stages -advisor.
  • Defender: Microsoft Defender for Cloud plans and tiers. Disable with --stages -defender.

Optional Sheets (disabled by default)

  • DefenderRecommendations: Defender for Cloud recommendations. Enable with --stages defender-recommendations.
  • Azure Policy: Non-compliant resources based on Azure Policy. Enable with --stages policy.
  • Arc SQL: Azure Arc-enabled SQL Server instances. Enable with --stages arc.
  • Costs: Cost data for the last calendar month. Enable with --stages cost.

By default, Azure Quick Review (azqr) obfuscates the Subscription Ids in the output to ensure the protection of sensitive information and maintain data privacy and security. If you want to display the Subscription Ids without obfuscation, you can use the --mask=false flag when executing the tool.

Azure Quick Review can also generate an csv files with the same information as the excel. To generate the csv files, you can use the --csv flag when running the tool.

Supported Azure Services

Azure Quick Review (azqr) currently supports the following Azure services:

\AbbreviationResource Type
aaMicrosoft.Automation/automationAccounts
adfMicrosoft.DataFactory/factories
afdMicrosoft.Cdn/profiles
afwMicrosoft.Network/azureFirewalls
afwMicrosoft.Network/ipGroups
agwMicrosoft.Network/applicationGateways
aifMicrosoft.CognitiveServices/accounts
aksMicrosoft.ContainerService/managedClusters
amgMicrosoft.Dashboard/grafana
apimMicrosoft.ApiManagement/service
appcsMicrosoft.AppConfiguration/configurationStores
appiMicrosoft.Insights/components
appiMicrosoft.Insights/activityLogAlerts
arcMicrosoft.AzureArcData/sqlServerInstances
asMicrosoft.AnalysisServices/servers
asaMicrosoft.StreamAnalytics/streamingJobs
aspMicrosoft.Web/serverFarms
aspMicrosoft.Web/sites
aspMicrosoft.Web/connections
aspMicrosoft.Web/certificates
availMicrosoft.Compute/availabilitySets
avdSpecialized.Workload/AVD
avsMicrosoft.AVS/privateClouds
avsSpecialized.Workload/AVS
baMicrosoft.Batch/batchAccounts
bastionMicrosoft.Network/bastionHosts
caMicrosoft.App/containerApps
caeMicrosoft.App/managedenvironments
ciMicrosoft.ContainerInstance/containerGroups
conMicrosoft.Network/connections
cosmosMicrosoft.DocumentDB/databaseAccounts
crMicrosoft.ContainerRegistry/registries
dbwMicrosoft.Databricks/workspaces
ddosMicrosoft.Network/ddosProtectionPlans
decMicrosoft.Kusto/clusters
diskMicrosoft.Compute/disks
dnsresMicrosoft.Network/dnsResolvers
dnszMicrosoft.Network/dnsZones
domainMicrosoft.AAD/domainServices
ercMicrosoft.Network/expressRouteCircuits
ercMicrosoft.Network/ExpressRoutePorts
ercMicrosoft.Network/expressRouteGateways
evgdMicrosoft.EventGrid/domains
evgtMicrosoft.EventGrid/topics
evhMicrosoft.EventHub/namespaces
fabricMicrosoft.Fabric/capacities
fdfpMicrosoft.Network/frontdoorWebApplicationFirewallPolicies
galMicrosoft.Compute/galleries
hpcSpecialized.Workload/HPC
hubMicrosoft.MachineLearningServices/workspaces
hubMicrosoft.MachineLearningServices/registries
iotMicrosoft.Devices/IotHubs
itMicrosoft.VirtualMachineImages/imageTemplates
kvMicrosoft.KeyVault/vaults
lbMicrosoft.Network/loadBalancers
logMicrosoft.OperationalInsights/workspaces
logicMicrosoft.Logic/workflows
mysqlMicrosoft.DBforMySQL/servers
mysqlMicrosoft.DBforMySQL/flexibleServers
netappMicrosoft.NetApp/netAppAccounts
ngMicrosoft.Network/natGateways
nicMicrosoft.Network/networkInterfaces
nsgMicrosoft.Network/networkSecurityGroups
ntcMicrosoft.NetworkFunction/azureTrafficCollectors
nwMicrosoft.Network/networkWatchers
odbOracle.Database/cloudExadataInfrastructures
odbOracle.Database/cloudVmClusters
p2svpngMicrosoft.Network/p2sVpnGateways
pdnszMicrosoft.Network/privateDnsZones
pepMicrosoft.Network/privateEndpoints
pipMicrosoft.Network/publicIPAddresses
psqlMicrosoft.DBforPostgreSQL/servers
psqlMicrosoft.DBforPostgreSQL/flexibleServers
redisMicrosoft.Cache/Redis
resourceMicrosoft.Resources
rgMicrosoft.Resources/resourceGroups
rsvMicrosoft.RecoveryServices/vaults
rtMicrosoft.Network/routeTables
sapSpecialized.Workload/SAP
sbMicrosoft.ServiceBus/namespaces
sigrMicrosoft.SignalRService/SignalR
sqlMicrosoft.Sql/servers
sqlMicrosoft.Sql/servers/databases
sqlMicrosoft.Sql/servers/elasticPools
sqlmiMicrosoft.Sql/managedInstances
srchMicrosoft.Search/searchServices
stMicrosoft.Storage/storageAccounts
subMicrosoft.Subscription/subscriptions
synwMicrosoft.Synapse/workspaces
synwMicrosoft.Synapse/workspaces/bigDataPools
synwMicrosoft.Synapse/workspaces/sqlPools
trafMicrosoft.Network/trafficManagerProfiles
vdpoolMicrosoft.DesktopVirtualization/hostPools
vdpoolMicrosoft.DesktopVirtualization/scalingPlans
vdpoolMicrosoft.DesktopVirtualization/workspaces
vgwMicrosoft.Network/virtualNetworkGateways
vhubMicrosoft.Network/virtualHubs
vmMicrosoft.Compute/virtualMachines
vmssMicrosoft.Compute/virtualMachineScaleSets
vnetMicrosoft.Network/virtualNetworks
vnetMicrosoft.Network/virtualNetworks/subnets
vpngMicrosoft.Network/vpnGateways
vpnsMicrosoft.Network/vpnSites
vrouterMicrosoft.Network/virtualRouters
vwanMicrosoft.Network/virtualWans
wpsMicrosoft.SignalRService/webPubSub

Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct

Trademark Notice

Trademarks This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft’s Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party’s policies.


Last modified February 26, 2026: build(deps-dev): bump hugo-extended from 0.156.0 to 0.157.0 in /docs (d44e663)