Azure audit compute vms with extensions remediation

Using Console

Using CLI

To remediate the misconfiguration “Virtual Machine Extensions Installed” in Azure using Azure CLI, follow the below steps:Step 1: Open the Azure CLI in your system.Step 2: Run the following command to list all the virtual machines in the Azure subscription:

az vm list --query "[].{name:name, location:location, resourceGroup:resourceGroup}"

Step 3: From the list of virtual machines, select the virtual machine for which you want to remove the extensions.Step 4: Run the following command to check the list of extensions installed on the virtual machine:

az vm extension list --resource-group <resource-group-name> --vm-name <virtual-machine-name> --query "[].{name:name, publisher:publisher, type:type, autoUpgradeMinorVersion:autoUpgradeMinorVersion, settings:settings, protectedSettings:protectedSettings, provisioningState:provisioningState, instanceView:instanceView}"

Step 5: From the list of extensions, select the extension that you want to remove.Step 6: Run the following command to remove the selected extension from the virtual machine:

az vm extension delete --resource-group <resource-group-name> --vm-name <virtual-machine-name> --name <extension-name>

Step 7: After running the above command, the extension will be removed from the virtual machine.Step 8: Repeat steps 4 to 7 for all the extensions that you want to remove from the virtual machine.Step 9: Once all the extensions are removed, the misconfiguration “Virtual Machine Extensions Installed” will be remediated in Azure.

Using Python

To remediate the issue of virtual machine extensions installed in Azure using Python, you can follow the below steps:Step 1: Connect to Azure Subscription You need to connect to your Azure subscription using Python SDK. You can use the below code to authenticate and connect to the subscription.

from azure.identity import AzureCliCredential
from azure.mgmt.compute import ComputeManagementClient
from azure.mgmt.resource import ResourceManagementClient

credential = AzureCliCredential()

subscription_id = 'your_subscription_id'

compute_client = ComputeManagementClient(credential, subscription_id)
resource_client = ResourceManagementClient(credential, subscription_id)

Step 2: Get Virtual Machines You need to fetch the list of all virtual machines in your subscription. You can use the below code to get the list of virtual machines.

vms = compute_client.virtual_machines.list_all()

Step 3: Get Virtual Machine Extensions You need to get the list of all virtual machine extensions installed on each virtual machine. You can use the below code to get the list of extensions.

for vm in vms:
    extensions = compute_client.virtual_machine_extensions.list(resource_group_name=vm.id.split('/')[4], virtual_machine_name=vm.name)
    for extension in extensions:
        print(extension.name)

Step 4: Remove Virtual Machine Extensions You need to remove the virtual machine extensions from each virtual machine. You can use the below code to remove the extensions.

for vm in vms:
    extensions = compute_client.virtual_machine_extensions.list(resource_group_name=vm.id.split('/')[4], virtual_machine_name=vm.name)
    for extension in extensions:
        compute_client.virtual_machine_extensions.delete(resource_group_name=vm.id.split('/')[4], virtual_machine_name=vm.name, extension_name=extension.name)

Note: Please be cautious while deleting the extensions as it may impact the functionality of your virtual machines.By following the above steps, you can remediate the issue of virtual machine extensions installed in Azure using Python.

Azure Introduction

Azure Pricing

Azure Threats

Azure Misconfigurations

Azure audit compute vms with extensions remediation

Triage and Remediation

Remediation