This afternoon when I logged into my Azure personal subscription and was presented with the screen below.
There was no set-up I had done and this was totally impromptu. So, I decided to dig a little deeper.
The azure advisor was launched earlier this year with the objective of providing proactive recommendations that would allow a user to improve performance, security and high availability of resources.
So, once I got the pop-up I decided to look a little closer and check out what is do-able from such a proactive notification.
Note: You need to have at least one active subscription to be able to view advisor recommendations.
And if you have it, once you click on "View my active recommendations", a screen like the below will show up. Note: The above and below images are not identical, as I used two different subscriptions for this article.
So, I decided to check out the Security related recommendations and sure enough, there were quite a few out there. Below is a sample of what you might see.
The best part was right below, I had detailed recommendations on what Microsoft suggests to be the best ways to secure the environment. Each recommendation came with a "secure score impact" which meant implementing it would add that score and help a resource turn green from red. By default, the whole set of recommendations are sorted by score in descending order and each recommendation also has the failed resources tagged to it.
A sample provided below for reference.
This was not all. Clicking on a recommendation gives details on threats of not implementing it as well as remediation steps, making the task really simple for an Azure administrator.
A sample below for reference.
So, overall, we have a way for automated health check of the Azure environment and the best part is - the recommendations are really detailed at resource level and it is easy to follow.
What do you need though?
1. An Azure subscription with the owner, contributor or reader access
2. As of this date, recommendations are provided for virtual machines, availability sets, application gateways, App Services, SQL servers, and Azure Cache for Redis.
Know more about this on the official Microsoft link.
There was no set-up I had done and this was totally impromptu. So, I decided to dig a little deeper.
The azure advisor was launched earlier this year with the objective of providing proactive recommendations that would allow a user to improve performance, security and high availability of resources.
So, once I got the pop-up I decided to look a little closer and check out what is do-able from such a proactive notification.
Note: You need to have at least one active subscription to be able to view advisor recommendations.
And if you have it, once you click on "View my active recommendations", a screen like the below will show up. Note: The above and below images are not identical, as I used two different subscriptions for this article.
So, I decided to check out the Security related recommendations and sure enough, there were quite a few out there. Below is a sample of what you might see.
The best part was right below, I had detailed recommendations on what Microsoft suggests to be the best ways to secure the environment. Each recommendation came with a "secure score impact" which meant implementing it would add that score and help a resource turn green from red. By default, the whole set of recommendations are sorted by score in descending order and each recommendation also has the failed resources tagged to it.
A sample provided below for reference.
This was not all. Clicking on a recommendation gives details on threats of not implementing it as well as remediation steps, making the task really simple for an Azure administrator.
A sample below for reference.
So, overall, we have a way for automated health check of the Azure environment and the best part is - the recommendations are really detailed at resource level and it is easy to follow.
What do you need though?
1. An Azure subscription with the owner, contributor or reader access
2. As of this date, recommendations are provided for virtual machines, availability sets, application gateways, App Services, SQL servers, and Azure Cache for Redis.
Know more about this on the official Microsoft link.
