This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Overview

Azure Quick Review — Analyze Azure resources and identify whether they comply with Azure’s best practices and recommendations.

    Azure Quick Review (azqr) is a powerful command-line interface (CLI) tool that specializes in analyzing Azure resources to ensure compliance with Azure’s best practices and recommendations. Its main objective is to offer users a comprehensive overview of their Azure resources, allowing them to easily identify any non-compliant configurations or areas for improvement.

    Azure Quick Review Recommendations

    Azure Quick Review (azqr) scans your resources with 2 types of recommendations:

    To learn more about the recommendations used by Azure Quick Review (azqr), you can refer to the documentation available here.

    Scan Results

    The output generated by Azure Quick Review (azqr) is written by default to an Excel file, which contains the following sheets:

    Core Sheets (always generated)

    • Recommendations: Action plan listing all recommendations with the count of impacted resources.
    • ImpactedResources: Resources that have issues to address.
    • ResourceTypes: Summary of impacted resource types.
    • Inventory: All scanned resources with details (SKU, Tier, Kind, calculated SLA).
    • OutOfScope: Resources that were not scanned.

    Optional Sheets (enabled by default)

    • Advisor: Recommendations from Azure Advisor. Disable with --stages -advisor.
    • Defender: Microsoft Defender for Cloud plans and tiers. Disable with --stages -defender.

    Optional Sheets (disabled by default)

    • DefenderRecommendations: Defender for Cloud recommendations. Enable with --stages defender-recommendations.
    • Azure Policy: Non-compliant resources based on Azure Policy. Enable with --stages policy.
    • Arc SQL: Azure Arc-enabled SQL Server instances. Enable with --stages arc.
    • Costs: Cost data for the last calendar month. Enable with --stages cost.

    By default, Azure Quick Review (azqr) obfuscates the Subscription Ids in the output to ensure the protection of sensitive information and maintain data privacy and security. If you want to display the Subscription Ids without obfuscation, you can use the --mask=false flag when executing the tool.

    Azure Quick Review can also generate an csv files with the same information as the excel. To generate the csv files, you can use the --csv flag when running the tool.

    Supported Azure Services

    Azure Quick Review (azqr) currently supports the following Azure services:

    \AbbreviationResource Type
    aaMicrosoft.Automation/automationAccounts
    adfMicrosoft.DataFactory/factories
    afdMicrosoft.Cdn/profiles
    afwMicrosoft.Network/azureFirewalls
    afwMicrosoft.Network/ipGroups
    agwMicrosoft.Network/applicationGateways
    aifMicrosoft.CognitiveServices/accounts
    aksMicrosoft.ContainerService/managedClusters
    amgMicrosoft.Dashboard/grafana
    apimMicrosoft.ApiManagement/service
    appcsMicrosoft.AppConfiguration/configurationStores
    appiMicrosoft.Insights/components
    appiMicrosoft.Insights/activityLogAlerts
    arcMicrosoft.AzureArcData/sqlServerInstances
    asMicrosoft.AnalysisServices/servers
    asaMicrosoft.StreamAnalytics/streamingJobs
    aspMicrosoft.Web/serverFarms
    aspMicrosoft.Web/sites
    aspMicrosoft.Web/connections
    aspMicrosoft.Web/certificates
    availMicrosoft.Compute/availabilitySets
    avdSpecialized.Workload/AVD
    avsMicrosoft.AVS/privateClouds
    avsSpecialized.Workload/AVS
    baMicrosoft.Batch/batchAccounts
    bastionMicrosoft.Network/bastionHosts
    caMicrosoft.App/containerApps
    caeMicrosoft.App/managedenvironments
    ciMicrosoft.ContainerInstance/containerGroups
    conMicrosoft.Network/connections
    cosmosMicrosoft.DocumentDB/databaseAccounts
    crMicrosoft.ContainerRegistry/registries
    dbwMicrosoft.Databricks/workspaces
    ddosMicrosoft.Network/ddosProtectionPlans
    decMicrosoft.Kusto/clusters
    diskMicrosoft.Compute/disks
    dnsresMicrosoft.Network/dnsResolvers
    dnszMicrosoft.Network/dnsZones
    domainMicrosoft.AAD/domainServices
    ercMicrosoft.Network/expressRouteCircuits
    ercMicrosoft.Network/ExpressRoutePorts
    ercMicrosoft.Network/expressRouteGateways
    evgdMicrosoft.EventGrid/domains
    evgtMicrosoft.EventGrid/topics
    evhMicrosoft.EventHub/namespaces
    fabricMicrosoft.Fabric/capacities
    fdfpMicrosoft.Network/frontdoorWebApplicationFirewallPolicies
    galMicrosoft.Compute/galleries
    hpcSpecialized.Workload/HPC
    hubMicrosoft.MachineLearningServices/workspaces
    hubMicrosoft.MachineLearningServices/registries
    iotMicrosoft.Devices/IotHubs
    itMicrosoft.VirtualMachineImages/imageTemplates
    kvMicrosoft.KeyVault/vaults
    lbMicrosoft.Network/loadBalancers
    logMicrosoft.OperationalInsights/workspaces
    logicMicrosoft.Logic/workflows
    mysqlMicrosoft.DBforMySQL/servers
    mysqlMicrosoft.DBforMySQL/flexibleServers
    netappMicrosoft.NetApp/netAppAccounts
    ngMicrosoft.Network/natGateways
    nicMicrosoft.Network/networkInterfaces
    nsgMicrosoft.Network/networkSecurityGroups
    ntcMicrosoft.NetworkFunction/azureTrafficCollectors
    nwMicrosoft.Network/networkWatchers
    odbOracle.Database/cloudExadataInfrastructures
    odbOracle.Database/cloudVmClusters
    p2svpngMicrosoft.Network/p2sVpnGateways
    pdnszMicrosoft.Network/privateDnsZones
    pepMicrosoft.Network/privateEndpoints
    pipMicrosoft.Network/publicIPAddresses
    psqlMicrosoft.DBforPostgreSQL/servers
    psqlMicrosoft.DBforPostgreSQL/flexibleServers
    redisMicrosoft.Cache/Redis
    resourceMicrosoft.Resources
    rgMicrosoft.Resources/resourceGroups
    rsvMicrosoft.RecoveryServices/vaults
    rtMicrosoft.Network/routeTables
    sapSpecialized.Workload/SAP
    sbMicrosoft.ServiceBus/namespaces
    sigrMicrosoft.SignalRService/SignalR
    sqlMicrosoft.Sql/servers
    sqlMicrosoft.Sql/servers/databases
    sqlMicrosoft.Sql/servers/elasticPools
    sqlmiMicrosoft.Sql/managedInstances
    srchMicrosoft.Search/searchServices
    stMicrosoft.Storage/storageAccounts
    subMicrosoft.Subscription/subscriptions
    synwMicrosoft.Synapse/workspaces
    synwMicrosoft.Synapse/workspaces/bigDataPools
    synwMicrosoft.Synapse/workspaces/sqlPools
    trafMicrosoft.Network/trafficManagerProfiles
    vdpoolMicrosoft.DesktopVirtualization/hostPools
    vdpoolMicrosoft.DesktopVirtualization/scalingPlans
    vdpoolMicrosoft.DesktopVirtualization/workspaces
    vgwMicrosoft.Network/virtualNetworkGateways
    vhubMicrosoft.Network/virtualHubs
    vmMicrosoft.Compute/virtualMachines
    vmssMicrosoft.Compute/virtualMachineScaleSets
    vnetMicrosoft.Network/virtualNetworks
    vnetMicrosoft.Network/virtualNetworks/subnets
    vpngMicrosoft.Network/vpnGateways
    vpnsMicrosoft.Network/vpnSites
    vrouterMicrosoft.Network/virtualRouters
    vwanMicrosoft.Network/virtualWans
    wpsMicrosoft.SignalRService/webPubSub

    Code of Conduct

    This project has adopted the Microsoft Open Source Code of Conduct

    Trademark Notice

    Trademarks This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft’s Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party’s policies.