Visualizing Azure resources

[JohnStarr]

Hi All,

Does anyone have a recommendation for an app/tool that will connect to an Azure subscription and pull details on networks, gateways, VMs etc and visualize them in a diagram?

Thanks!

 

[Traq]

You don't really have the best options to do this IMO.

The couple of solutions I can think of at the moment, are either considering ARMVIZ (http://armviz.io/) or using ARM Template Viewer for VS Code (https://marketplace.visualstudio.com/items?itemName=bencoleman.armview).

The options at this point is terrible because there is no real way of defining logical dependencies between deployed resources unless you are trying to visualize something you are deploying with ARM, and therefore you can define the dependsOn tag in the template.

FYI, the max resources which can be extracted at once to an ARM template from the portal/API is 1,000 - and this includes hidden resources. Additionally, if you do define custom dependencies in ARM, they are lost after the deployment, so ensure to generate it from the source code.

 

[JohnStarr]

You don't really have the best options to do this IMO.

The couple of solutions I can think of at the moment, are either considering ARMVIZ (http://armviz.io/) or using ARM Template Viewer for VS Code (https://marketplace.visualstudio.com/items?itemName=bencoleman.armview).

The options at this point is terrible because there is no real way of defining logical dependencies between deployed resources unless you are trying to visualize something you are deploying with ARM, and therefore you can define the dependsOn tag in the template.

FYI, the max resources which can be extracted at once to an ARM template from the portal/API is 1,000 - and this includes hidden resources. Additionally, if you do define custom dependencies in ARM, they are lost after the deployment, so ensure to generate it from the source code.

Damn...I literally want it to trawl through and draw from VPN connections to the NSG, firewalls attached, VMs with attached disk and NICs, and anything else.
I saw ARMVIZ and will check it out but I have literally never used anything off GitHub so I will be learning something new.

Thanks for this, will report back with an update.

 

[Traq]

Attached disks, and NIC's will show as they are implicit if allocated. Logical dependencies such as App Service --dependsOn--> Azure SQL DB won't, only if it is custom ARM.

I know a few resources doesn't support being extracted to ARM as well, but not memorized though. If the resources are split across subscriptions or resource groups, that will also muddy the water with the above two tools.

Thinking about it though, I am old school with ARM - but you could crawl your account with terraform maybe and then use the following (not visually appealing) https://www.terraform.io/docs/commands/graph.html

If you are wanting to do a network map, then you need to make sure all the VNET's are attached to a network watcher, and then you can generate a network map, but that will exclude resources if they are not attached/isolated through VNET's.

Link for the docs article: https://docs.microsoft.com/en-us/azure/network-watcher/view-network-topology