azure-resource-audit

/azure-resource-audit

If you see unfamiliar placeholders, see CONNECTORS.md.

Produce a structured inventory of Azure resources for audit, cost review, and cleanup.

Usage

/azure-resource-audit $ARGUMENTS

Examples:

• /azure-resource-audit all — full inventory across all subscriptions
• /azure-resource-audit rg-cp-production — single resource group
• /azure-resource-audit VMs — all VMs across subscriptions
• /azure-resource-audit untagged — resources missing required tags

Steps

1. Resolve scope: all subscriptions, specific resource group, or resource type filter
2. Query ~~cloud (Azure) for resources in scope
3. For each resource: name, type, location, state, SKU/size, tags, owner
4. Flag: stopped VMs still incurring cost, storage without soft-delete, untagged resources, key vaults with no recent access
5. Estimate monthly cost per resource if cost data available
6. Output inventory report with flagged issues

Resource Categories

Type	What to Check
Virtual Machines	Running vs stopped, size, disk type, backup enabled
Storage Accounts	Access tier, soft-delete, redundancy, public blob access
App Services	Tier, always-on, custom domains, scaling config
SQL Databases	Tier, geo-redundancy, long-term backup retention
Key Vaults	Access policies, purge protection, last access
Public IPs	Allocated but unassociated = waste
Managed Disks	Unattached disks = cost with no value
Load Balancers	Backend pool empty = orphaned

Tagging Policy (CP Required Tags)

Tag	Values	Required on
Environment	production, staging, dev	All resources
Owner	user@chelseapiers.com	All resources
CostCenter	[department code]	All compute + storage
Project	[project name]	All resources

Output

## Azure Resource Audit

**Scope:** [all / resource group / type]
**Subscriptions:** [list]
**Total resources:** [N]
**Audited:** [timestamp]

---

### Summary by Type
| Type | Count | Running | Stopped | Flagged |
|------|-------|---------|---------|---------|
| Virtual Machines | [N] | [N] | [N] | [N] |
| Storage Accounts | [N] | — | — | [N] |
| App Services | [N] | [N] | [N] | [N] |
| Managed Disks | [N] | — | — | [N] |

---

### Flagged Resources
| Resource | Type | Issue | Est. Monthly Cost |
|----------|------|-------|-------------------|
| [name] | VM | Stopped but allocated — consuming disk cost | $[X]/mo |
| [name] | Disk | Unattached managed disk | $[X]/mo |
| [name] | Public IP | Unassociated — idle cost | $[X]/mo |
| [name] | Various | Missing tags: Environment, Owner | — |

### Recommended Cleanup Actions
- **Deallocate or delete:** [N resources] — estimated savings: $[X]/mo
- **Tag:** [N resources] missing required tags
- **Review:** [N resources] with unusual configuration

---

### Full Inventory

#### Virtual Machines
| Name | RG | Location | Size | State | OS | Tags | Est. $/mo |
|------|----|----------|------|-------|----|------|-----------|
| [name] | [rg] | eastus | Standard_D2s_v3 | Running ✅ | Windows Server 2022 | ✅ | $[X] |

#### Storage Accounts
| Name | RG | Tier | Redundancy | Public Access | Soft Delete | Tags |
|------|----|------|-----------|--------------|------------|------|

#### [other resource types as applicable]

If Connectors Available

If ~~cloud (Azure) is connected:

• List resources: GET /subscriptions/{subId}/resources
• VM status: GET /subscriptions/{subId}/providers/Microsoft.Compute/virtualMachines
• Unattached disks: filter managedBy == null
• Tags: pull from resource metadata
• Cost: query Azure Cost Management API for last 30d actuals

If not connected:

• Output Azure Portal path: All resources → filter by subscription/type
• Provide Azure CLI commands for each query:

  az resource list --subscription [sub] --output table
  az vm list --subscription [sub] --query "[].{Name:name, State:powerState}" --output table
  az disk list --subscription [sub] --query "[?managedBy==null].{Name:name, Size:diskSizeGB}" --output table
  

CP-Specific Notes

• Subscriptions: CP Azure environment has 3 subscriptions: Production, Staging, and Dev. Audit all three unless scoped.
• Cost threshold: any single resource costing >$500/mo requires IT Manager awareness. Flag in report.
• Dev subscription: dev resources are expected to be inconsistently tagged. Focus cleanup on Production.
• Key Vault access: CP Key Vaults hold CP-IT-Ops app secrets. Access policy should allow only the service principal — flag any user account with direct Key Vault access.
• Backup: all production VMs and SQL databases must have backup enabled. Flag any that don't.
• Region: all CP resources should be in eastus or eastus2. Resources in other regions are unexpected — flag for review.