Azure Inventory Management

Azure Cloud Inventory: Discover & Manage Every Azure Resource

Auto-discover Azure VMs, AKS, SQL databases, storage accounts, VNets, and 50+ resource types across all subscriptions. Health monitoring, CIS compliance, and cost visibility in one dashboard.

50+ Azure Resource Types Auto-Discovered

CloudVista queries Azure Resource Manager APIs across every subscription and region, building a complete, continuously updated inventory without any agents or manual configuration.

πŸ–₯️

Virtual Machines

VM size, OS, power state, availability set/zone, managed disk, NSG association

☸️

AKS Clusters

Kubernetes version, node pool count, networking plugin, RBAC enabled, monitoring

πŸ—„οΈ

Azure SQL & Cosmos DB

SKU, DTUs/vCores, geo-replication, TDE encryption, firewall rules, audit logs

πŸͺ£

Storage Accounts

Kind, replication, public blob access, TLS version, HTTPS-only enforcement

⚑

Azure Functions & App Services

Runtime, SKU, HTTPS-only, managed identity, VNET integration

🌐

VNets & Subnets

Address space, peerings, service endpoints, NSG/route table associations

πŸ”’

Network Security Groups

Inbound/outbound rules, any-source rules flagged, effective security rules

βš–οΈ

Application Gateways & Load Balancers

SKU, frontend IPs, backend pools, health probe status, WAF policy

πŸ”‘

Key Vaults

Soft delete, purge protection, access policies, RBAC mode, diagnostic logs

πŸ‘€

Entra ID (AAD)

Service principals, managed identities, app registrations, role assignments

πŸ“¦

Container Instances

Image, CPU/memory, restart policy, IP address, container group state

πŸ””

+40 More Types

Azure Firewall, Bastion, CDN, Event Hub, Service Bus, Redis Cache, and more

Azure Inventory Setup in 3 Steps

Read-only access via Azure Service Principal β€” no agents, no resource deployments, no changes to your environment.

Register an App in Microsoft Entra ID

In the Azure Portal, go to Microsoft Entra ID › App Registrations › New Registration. Create a client secret. This Service Principal is what CloudVista uses for read-only API access.

Assign the Reader Role

Navigate to your Subscription › Access Control (IAM) › Add Role Assignment. Assign the built-in Reader role to the App Registration. For multi-subscription, assign at Management Group level.

Add to CloudVista & Discover

Enter the Tenant ID, Subscription ID, Client ID, and Client Secret in CloudVista's Credentials page. CloudVista validates access and immediately begins discovering resources across all resource groups and regions.

Azure Inventory Features Beyond Discovery

Azure Health Monitoring

Real-time operational health per resource: VMs in failed provisioning state, AKS nodes not ready, SQL servers with replication issues, storage accounts with access errors.

CIS Azure Foundations Compliance

Continuous checks against CIS Microsoft Azure Foundations Benchmark v2.0 β€” identity, Defender for Cloud, storage security, database auditing, networking, and logging controls.

Azure Cost & Budget Tracking

Monthly spend by subscription, resource group, and service. 12-month cost trend and 3-month forecast. Budget alerts before you breach limits. Stale VM and SQL identification.

VNet Topology Maps

Visual topology of virtual networks, subnets, NSGs, VMs, load balancers, and peering connections across subscriptions and regions.

Azure Resource Change History

Track every VM resize, NSG rule change, storage account modification, and new resource deployment β€” with timestamps for incident response and compliance evidence.

Unified Multi-Cloud View

See Azure alongside AWS, OCI, GCP, and VMware in one dashboard. Cross-cloud comparison for compliance posture, resource counts, and cost β€” without switching tools.

Frequently Asked Questions β€” Azure Inventory

How do I connect Azure to CloudVista?

Register an Azure App Registration (Service Principal) in Microsoft Entra ID. Assign the Reader role at the subscription or Management Group level. Add the Tenant ID, Client ID, and Client Secret to CloudVista. Discovery begins across all resource groups and regions within minutes.

Does CloudVista support multiple Azure subscriptions?

Yes. Add a Service Principal credential per subscription, or grant the Reader role at Management Group level to discover all subscriptions in your Azure tenant from a single credential.

What Azure compliance benchmarks does CloudVista check?

CloudVista runs CIS Microsoft Azure Foundations Benchmark v2.0 checks. Findings map automatically to SOC 2 Trust Service Criteria and ISO 27001:2022 Annex A controls β€” with a one-click evidence export for auditors.

Can CloudVista monitor Azure alongside AWS and OCI?

Yes β€” this is CloudVista's core strength. See Azure, AWS, OCI, GCP, and VMware vSphere inventory in a unified dashboard. CloudVista is the only managed platform supporting all five providers natively.

Is Azure inventory included in the free plan?

Yes. The free forever plan covers Azure inventory for up to 300 resources across 1 subscription, health monitoring, and basic compliance checks. No credit card required.

Get Your Complete Azure Inventory β€” Free

CloudVista discovers every Azure VM, SQL database, AKS cluster, and storage account across all your subscriptions. No agents, no credit card, free forever.

Start Free Today Live Demo