mirror of
https://dev.azure.com/effectory/Survey%20Software/_git/Cloud%20Engineering
synced 2026-02-27 18:52:18 +01:00
added documetation
This commit is contained in:
Jurjen Ladenius
@@ -1,56 +1,288 @@
|
||||
#Connect-AzAccount
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Exports detailed information about Azure Application Insights resources across all enabled subscriptions.
|
||||
|
||||
[string] $date = Get-Date -Format "yyyy-MM-dd HHmm"
|
||||
$fileName = ".\$date appinsights.csv"
|
||||
.DESCRIPTION
|
||||
This script analyzes all Application Insights resources across enabled Azure subscriptions and
|
||||
collects comprehensive information including:
|
||||
- Basic resource metadata (ID, name, resource group, subscription)
|
||||
- Log Analytics workspace associations
|
||||
- Resource tags for governance and organization
|
||||
|
||||
The script is particularly useful for:
|
||||
- Application Insights inventory and governance
|
||||
- Monitoring workspace associations for centralized logging
|
||||
- Tag compliance auditing
|
||||
- Cost management and resource organization
|
||||
|
||||
$subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
|
||||
.PARAMETER SubscriptionFilter
|
||||
Optional array of subscription IDs to analyze. If not specified, all enabled subscriptions are processed.
|
||||
|
||||
class AppInsightsCheck {
|
||||
[string] $SubscriptionId = ""
|
||||
[string] $SubscriptionName = ""
|
||||
[string] $Id = ""
|
||||
[string] $ResourceGroupName = ""
|
||||
[string] $Name = ""
|
||||
[string] $WorkspaceResourceId = ""
|
||||
[string] $Tag_Team = ""
|
||||
[string] $Tag_Product = ""
|
||||
[string] $Tag_Environment = ""
|
||||
[string] $Tag_Data = ""
|
||||
[string] $Tag_CreatedOnDate = ""
|
||||
[string] $Tag_Deployment = ""
|
||||
.PARAMETER OutputPath
|
||||
Custom path for the output CSV file. If not specified, creates a timestamped file in the current directory.
|
||||
|
||||
.EXAMPLE
|
||||
.\AppInsightsWorkspace.ps1
|
||||
|
||||
Analyzes all Application Insights resources across all enabled subscriptions.
|
||||
|
||||
.EXAMPLE
|
||||
.\AppInsightsWorkspace.ps1 -SubscriptionFilter @("12345678-1234-1234-1234-123456789012", "87654321-4321-4321-4321-210987654321")
|
||||
|
||||
Analyzes Application Insights resources in specific subscriptions only.
|
||||
|
||||
.EXAMPLE
|
||||
.\AppInsightsWorkspace.ps1 -OutputPath "C:\Reports\appinsights-analysis.csv"
|
||||
|
||||
Analyzes all Application Insights resources and saves to a custom location.
|
||||
|
||||
.OUTPUTS
|
||||
Creates a CSV file with the following columns:
|
||||
- SubscriptionId: Azure subscription unique identifier
|
||||
- SubscriptionName: Azure subscription display name
|
||||
- Id: Application Insights resource ID
|
||||
- ResourceGroupName: Resource group containing the Application Insights resource
|
||||
- Name: Application Insights resource name
|
||||
- WorkspaceResourceId: Associated Log Analytics workspace resource ID (if any)
|
||||
- Tag_Team: Value of 'team' tag
|
||||
- Tag_Product: Value of 'product' tag
|
||||
- Tag_Environment: Value of 'environment' tag
|
||||
- Tag_Data: Value of 'data' tag
|
||||
- Tag_CreatedOnDate: Value of 'CreatedOnDate' tag
|
||||
- Tag_Deployment: Value of 'drp_deployment' tag
|
||||
|
||||
Also displays a formatted table of results in the console.
|
||||
|
||||
.NOTES
|
||||
Author: Cloud Engineering Team
|
||||
Created: 2025
|
||||
Requires: PowerShell 5.1 or later, Az PowerShell module
|
||||
Dependencies: Az.ApplicationInsights, Az.Accounts, Az.Resources modules
|
||||
|
||||
Prerequisites:
|
||||
- Install Az PowerShell module: Install-Module -Name Az
|
||||
- Connect to Azure: Connect-AzAccount
|
||||
- Appropriate permissions to read Application Insights resources across target subscriptions
|
||||
|
||||
Performance Considerations:
|
||||
- Processing time depends on the number of subscriptions and Application Insights resources
|
||||
- The script switches contexts between subscriptions, which may take time with many subscriptions
|
||||
- Large numbers of resources may result in longer execution times
|
||||
|
||||
Tag Analysis:
|
||||
The script looks for specific tags commonly used for governance:
|
||||
- team: Identifies the responsible team
|
||||
- product: Associates the resource with a product or service
|
||||
- environment: Indicates the environment (dev, test, prod, etc.)
|
||||
- data: Data classification or sensitivity level
|
||||
- CreatedOnDate: Resource creation timestamp
|
||||
- drp_deployment: Deployment-related information
|
||||
|
||||
Workspace Association:
|
||||
- Modern Application Insights resources should be associated with Log Analytics workspaces
|
||||
- Resources without workspace associations may be using legacy standalone mode
|
||||
- Workspace associations enable advanced querying and cross-resource analytics
|
||||
|
||||
.LINK
|
||||
https://docs.microsoft.com/en-us/powershell/module/az.applicationinsights/
|
||||
https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview
|
||||
#>
|
||||
|
||||
param(
|
||||
[Parameter(Mandatory = $false, HelpMessage = "Array of subscription IDs to analyze (analyzes all enabled subscriptions if not specified)")]
|
||||
[string[]]$SubscriptionFilter = @(),
|
||||
|
||||
[Parameter(Mandatory = $false, HelpMessage = "Custom path for the output CSV file")]
|
||||
[string]$OutputPath = ""
|
||||
)
|
||||
|
||||
# Check Azure PowerShell authentication
|
||||
Write-Host "Verifying Azure PowerShell authentication..." -ForegroundColor Yellow
|
||||
try {
|
||||
$azContext = Get-AzContext
|
||||
if (-not $azContext) {
|
||||
Write-Host "Not authenticated to Azure. Attempting to connect..." -ForegroundColor Yellow
|
||||
Connect-AzAccount
|
||||
$azContext = Get-AzContext
|
||||
}
|
||||
Write-Host "Azure authentication verified - Account: $($azContext.Account.Id)" -ForegroundColor Green
|
||||
}
|
||||
catch {
|
||||
Write-Host "ERROR: Unable to authenticate to Azure. Please run 'Connect-AzAccount' manually." -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Generate filename if not provided
|
||||
if (-not $OutputPath) {
|
||||
[string] $date = Get-Date -Format "yyyy-MM-dd HHmm"
|
||||
$OutputPath = ".\$date appinsights.csv"
|
||||
}
|
||||
|
||||
# Get target subscriptions based on filter or all enabled subscriptions
|
||||
Write-Host "Retrieving target subscriptions..." -ForegroundColor Yellow
|
||||
if ($SubscriptionFilter.Count -gt 0) {
|
||||
$subscriptions = $SubscriptionFilter | ForEach-Object {
|
||||
Get-AzSubscription -SubscriptionId $_ | Where-Object State -eq "Enabled"
|
||||
} | Where-Object { $_ -ne $null }
|
||||
Write-Host "Analyzing $($subscriptions.Count) filtered subscriptions" -ForegroundColor Green
|
||||
} else {
|
||||
$subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
|
||||
Write-Host "Analyzing all $($subscriptions.Count) enabled subscriptions" -ForegroundColor Green
|
||||
}
|
||||
|
||||
# Define a class to structure Application Insights resource information
|
||||
class AppInsightsCheck {
|
||||
[string] $SubscriptionId = "" # Azure subscription unique identifier
|
||||
[string] $SubscriptionName = "" # Azure subscription display name
|
||||
[string] $Id = "" # Application Insights resource ID
|
||||
[string] $ResourceGroupName = "" # Resource group containing the resource
|
||||
[string] $Name = "" # Application Insights resource name
|
||||
[string] $WorkspaceResourceId = "" # Associated Log Analytics workspace resource ID
|
||||
[string] $Tag_Team = "" # Team responsible for the resource
|
||||
[string] $Tag_Product = "" # Product or service association
|
||||
[string] $Tag_Environment = "" # Environment designation (dev, test, prod)
|
||||
[string] $Tag_Data = "" # Data classification or sensitivity level
|
||||
[string] $Tag_CreatedOnDate = "" # Resource creation date from tags
|
||||
[string] $Tag_Deployment = "" # Deployment-related information
|
||||
}
|
||||
|
||||
# Initialize array to store Application Insights analysis results
|
||||
[AppInsightsCheck[]]$Result = @()
|
||||
$totalResourcesProcessed = 0
|
||||
|
||||
foreach ($subscription in $subscriptions)
|
||||
{
|
||||
Set-AzContext -SubscriptionId $subscription.Id
|
||||
# Display analysis banner
|
||||
Write-Host "`n========================================================================================================================================================================"
|
||||
Write-Host "AZURE APPLICATION INSIGHTS ANALYSIS"
|
||||
Write-Host "========================================================================================================================================================================"
|
||||
|
||||
$allAppinsights = Get-AzApplicationInsights
|
||||
foreach ($appinsights in $allAppinsights)
|
||||
{
|
||||
[AppInsightsCheck] $AppInsightsCheck = [AppInsightsCheck]::new()
|
||||
|
||||
$AppInsightsCheck.SubscriptionId = $subscription.Id
|
||||
$AppInsightsCheck.SubscriptionName = $subscription.Name
|
||||
$AppInsightsCheck.Id = $appinsights.Id
|
||||
$AppInsightsCheck.Name = $appinsights.Name
|
||||
$AppInsightsCheck.ResourceGroupName = $appinsights.ResourceGroupName
|
||||
$AppInsightsCheck.WorkspaceResourceId = $appinsights.WorkspaceResourceId
|
||||
|
||||
$resource = Get-AzResource -ResourceId $appinsights.Id
|
||||
|
||||
$AppInsightsCheck.Tag_Team = $resource.Tags.team
|
||||
$AppInsightsCheck.Tag_Product = $resource.Tags.product
|
||||
$AppInsightsCheck.Tag_Environment = $resource.Tags.environment
|
||||
$AppInsightsCheck.Tag_Data = $resource.Tags.data
|
||||
$AppInsightsCheck.Tag_CreatedOnDate = $resource.Tags.CreatedOnDate
|
||||
$AppInsightsCheck.Tag_Deployment = $resource.Tags.drp_deployment
|
||||
# Process each subscription to analyze Application Insights resources
|
||||
foreach ($subscription in $subscriptions) {
|
||||
Write-Host "`nAnalyzing subscription: $($subscription.Name) ($($subscription.Id))" -ForegroundColor Cyan
|
||||
|
||||
try {
|
||||
# Switch to the current subscription context
|
||||
Set-AzContext -SubscriptionId $subscription.Id -ErrorAction Stop | Out-Null
|
||||
|
||||
$Result += $AppInsightsCheck
|
||||
# Get all Application Insights resources in the subscription
|
||||
Write-Host " Retrieving Application Insights resources..." -ForegroundColor Gray
|
||||
$allAppinsights = Get-AzApplicationInsights -ErrorAction Stop
|
||||
|
||||
if ($allAppinsights.Count -eq 0) {
|
||||
Write-Host " No Application Insights resources found" -ForegroundColor Yellow
|
||||
continue
|
||||
}
|
||||
|
||||
Write-Host " Found $($allAppinsights.Count) Application Insights resources" -ForegroundColor Green
|
||||
|
||||
# Process each Application Insights resource
|
||||
foreach ($appinsights in $allAppinsights) {
|
||||
Write-Host " Processing: $($appinsights.Name)" -ForegroundColor Gray
|
||||
|
||||
try {
|
||||
# Create new analysis object and populate basic information
|
||||
[AppInsightsCheck] $AppInsightsCheck = [AppInsightsCheck]::new()
|
||||
$AppInsightsCheck.SubscriptionId = $subscription.Id
|
||||
$AppInsightsCheck.SubscriptionName = $subscription.Name
|
||||
$AppInsightsCheck.Id = $appinsights.Id
|
||||
$AppInsightsCheck.Name = $appinsights.Name
|
||||
$AppInsightsCheck.ResourceGroupName = $appinsights.ResourceGroupName
|
||||
$AppInsightsCheck.WorkspaceResourceId = $appinsights.WorkspaceResourceId
|
||||
|
||||
# Check workspace association
|
||||
if ($appinsights.WorkspaceResourceId) {
|
||||
Write-Host " Workspace-based Application Insights" -ForegroundColor Green
|
||||
} else {
|
||||
Write-Host " Legacy standalone Application Insights (consider migrating)" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
# Retrieve detailed resource information for tags
|
||||
Write-Host " Retrieving resource tags..." -ForegroundColor Gray
|
||||
$resource = Get-AzResource -ResourceId $appinsights.Id -ErrorAction Stop
|
||||
|
||||
# Extract governance tags
|
||||
$AppInsightsCheck.Tag_Team = $resource.Tags.team
|
||||
$AppInsightsCheck.Tag_Product = $resource.Tags.product
|
||||
$AppInsightsCheck.Tag_Environment = $resource.Tags.environment
|
||||
$AppInsightsCheck.Tag_Data = $resource.Tags.data
|
||||
$AppInsightsCheck.Tag_CreatedOnDate = $resource.Tags.CreatedOnDate
|
||||
$AppInsightsCheck.Tag_Deployment = $resource.Tags.drp_deployment
|
||||
|
||||
# Report on tag compliance
|
||||
$tagCount = @($AppInsightsCheck.Tag_Team, $AppInsightsCheck.Tag_Product, $AppInsightsCheck.Tag_Environment) | Where-Object { $_ } | Measure-Object | Select-Object -ExpandProperty Count
|
||||
if ($tagCount -eq 3) {
|
||||
Write-Host " All required tags present" -ForegroundColor Green
|
||||
} else {
|
||||
Write-Host " Missing required tags (team, product, environment)" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
# Add to results
|
||||
$Result += $AppInsightsCheck
|
||||
$totalResourcesProcessed++
|
||||
|
||||
} catch {
|
||||
Write-Host " ERROR processing resource: $($_.Exception.Message)" -ForegroundColor Red
|
||||
# Still add basic info even if tag retrieval fails
|
||||
[AppInsightsCheck] $AppInsightsCheck = [AppInsightsCheck]::new()
|
||||
$AppInsightsCheck.SubscriptionId = $subscription.Id
|
||||
$AppInsightsCheck.SubscriptionName = $subscription.Name
|
||||
$AppInsightsCheck.Id = $appinsights.Id
|
||||
$AppInsightsCheck.Name = $appinsights.Name
|
||||
$AppInsightsCheck.ResourceGroupName = $appinsights.ResourceGroupName
|
||||
$AppInsightsCheck.WorkspaceResourceId = $appinsights.WorkspaceResourceId
|
||||
$Result += $AppInsightsCheck
|
||||
$totalResourcesProcessed++
|
||||
}
|
||||
}
|
||||
|
||||
} catch {
|
||||
Write-Host " ERROR accessing subscription: $($_.Exception.Message)" -ForegroundColor Red
|
||||
continue
|
||||
}
|
||||
}
|
||||
|
||||
$Result | Export-Csv -Path $fileName -NoTypeInformation -Force
|
||||
# Export results to CSV file
|
||||
Write-Host "`nExporting results to: $OutputPath" -ForegroundColor Yellow
|
||||
$Result | Export-Csv -Path $OutputPath -NoTypeInformation -Force
|
||||
|
||||
$Result | ft
|
||||
# Calculate and display summary statistics
|
||||
$totalSubscriptions = $subscriptions.Count
|
||||
$workspaceBasedCount = ($Result | Where-Object { $_.WorkspaceResourceId -ne "" }).Count
|
||||
$legacyCount = ($Result | Where-Object { $_.WorkspaceResourceId -eq "" }).Count
|
||||
$taggedResourcesCount = ($Result | Where-Object { $_.Tag_Team -ne "" -and $_.Tag_Product -ne "" -and $_.Tag_Environment -ne "" }).Count
|
||||
|
||||
# Display completion summary
|
||||
Write-Host "`n========================================================================================================================================================================"
|
||||
Write-Host "APPLICATION INSIGHTS ANALYSIS COMPLETED SUCCESSFULLY!" -ForegroundColor Green
|
||||
Write-Host "========================================================================================================================================================================"
|
||||
Write-Host ""
|
||||
Write-Host "SUMMARY STATISTICS:" -ForegroundColor Cyan
|
||||
Write-Host "Subscriptions analyzed: $totalSubscriptions" -ForegroundColor Yellow
|
||||
Write-Host "Total Application Insights resources: $totalResourcesProcessed" -ForegroundColor Yellow
|
||||
Write-Host "Workspace-based resources: $workspaceBasedCount" -ForegroundColor Yellow
|
||||
Write-Host "Legacy standalone resources: $legacyCount" -ForegroundColor Yellow
|
||||
Write-Host "Resources with complete tags (team, product, environment): $taggedResourcesCount" -ForegroundColor Yellow
|
||||
|
||||
# Highlight areas needing attention
|
||||
if ($legacyCount -gt 0) {
|
||||
Write-Host ""
|
||||
Write-Host "RECOMMENDATIONS:" -ForegroundColor Cyan
|
||||
Write-Host "- $legacyCount legacy Application Insights resources should be migrated to workspace-based mode" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
if ($taggedResourcesCount -lt $totalResourcesProcessed) {
|
||||
$untaggedCount = $totalResourcesProcessed - $taggedResourcesCount
|
||||
Write-Host "- $untaggedCount resources are missing required governance tags" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
Write-Host ""
|
||||
Write-Host "Output file: $OutputPath" -ForegroundColor Yellow
|
||||
|
||||
# Display results table
|
||||
Write-Host ""
|
||||
Write-Host "DETAILED RESULTS:" -ForegroundColor Cyan
|
||||
$Result | Format-Table -Property SubscriptionName, Name, ResourceGroupName, @{
|
||||
Name = 'WorkspaceAssociated'
|
||||
Expression = { if ($_.WorkspaceResourceId) { 'Yes' } else { 'No' } }
|
||||
}, Tag_Team, Tag_Product, Tag_Environment -AutoSize
|
||||
|
||||
Write-Host "========================================================================================================================================================================"
|
||||
Reference in New Issue
Block a user