Skip to content

Instantly share code, notes, and snippets.

View MauricioZa's full-sized avatar

Mauricio Zaragoza MauricioZa

View GitHub Profile
@MauricioZa
MauricioZa / MauAzureBatchAdministrator.json
Created November 12, 2021 20:12
Azure custom role to create and administer Azure Batch spaces
{
"id": "/subscriptions/5141f008-b6ee-4e54-9792-75a237e1c9c1/providers/Microsoft.Authorization/roleDefinitions/e98dcac9-41d1-4a6e-a776-d7abd69f71b9",
"properties": {
"roleName": "Mau Batch Administrator",
"description": "Mau Batch Administrator",
"assignableScopes": [
"/subscriptions/5141f008-b6ee-4e54-9792-75a237e1c9c1/resourcegroups/rg-batch"
],
"permissions": [
{
# ------------------------------------------
# VARIABLES
# ------------------------------------------
$NetworkRG = "Network"
$DatabricksRG = "Databricks"
$virtualNetworkName = "vn-databricks"
# ------------------------------------------
# AUTHENTICATION
{
"id": "/subscriptions/5141f008-b6ee-4e54-9792-75a237e1c9c1/providers/Microsoft.Authorization/roleDefinitions/8f259318-a77e-4117-ab47-9de16ed8dd0a",
"properties": {
"roleName": "Mau Databricks Workspace Contributor",
"description": "Can create Databricks Workspaces with the principle of least privilege",
"assignableScopes": [
"/subscriptions/5141f008-b6ee-4e54-9792-75a237e1c9c1"
],
"permissions": [
{
@MauricioZa
MauricioZa / allResourcesExceptHidden
Created May 4, 2021 15:29
Graph query to retrieve ALL resources (excluding hidden)
resources|where (resourceGroup =~ ('rg-INSERT-RESOURCE-GROUP-NAME-HERE'))|extend typeDisplayName=case(
type =~ 'microsoft.insights/components','Application Insights',
type =~ 'microsoft.insights/privatelinkscopes','Azure Monitor Private Link Scope',
type =~ 'microsoft.insights/webtests','Availability test',
type =~ 'microsoft.insights/workbooks','Azure Workbook',
type =~ 'microsoft.insights/workbooktemplates','Azure Workbook Template',
type =~ 'microsoft.appplatform/spring','Azure Spring Cloud',
type =~ 'microsoft.appplatform/tanzu','Azure Spring Cloud',
type =~ 'microsoft.cache/redisenterprise','Redis Enterprise',
type =~ 'microsoft.cache/redisenterprise/databases','Cache',
@MauricioZa
MauricioZa / allResources.txt
Created May 4, 2021 15:26
Graph query to retrieve ALL resources (including hidden)
resources|where (resourceGroup =~ ('rg-INSERT-YOUR-RG-NAME-HERE'))|extend typeDisplayName=case(
type =~ 'microsoft.insights/components','Application Insights',
type =~ 'microsoft.insights/privatelinkscopes','Azure Monitor Private Link Scope',
type =~ 'microsoft.insights/webtests','Availability test',
type =~ 'microsoft.insights/workbooks','Azure Workbook',
type =~ 'microsoft.insights/workbooktemplates','Azure Workbook Template',
type =~ 'microsoft.appplatform/spring','Azure Spring Cloud',
type =~ 'microsoft.appplatform/tanzu','Azure Spring Cloud',
type =~ 'microsoft.cache/redisenterprise','Redis Enterprise',
type =~ 'microsoft.cache/redisenterprise/databases','Cache',
Subscription_name Subscription_ID Databases_Resouce_Group_Name Storage_account_name Storage_account_resource_group Notes
Mauricio Zaragoza AIA 9dete535-38c6-45ec-ab26-a0fc132f4b4a rg-Joseph-MariaDB josephmariadb rg-Joseph-MariaDB First subscription
Mauricio Zaragoza AIA 9dete535-38c6-45ec-ab26-a0fc132f4b4a rg-Joseph-MariaDB2 josephmariadb2 rg-Joseph-MariaDB2 second subscription
<#
.SYNOPSIS
Enables Diagnostic Settings Audit Logs and Slow Query Logs for MariaDB servers and output to Storage Account
.DESCRIPTION
Enables Diagnostic Settings Audit Logs and Slow Query Logs for MariaDB servers and output to Storage Account
.PARAMETERS
All parameters are requested interactively
.EXAMPLE
.\New-MariaDBMonitoringConfiguration.ps1
.OUTPUTS
Subscription_name Subscription_ID Compute_Resource_group_name Storage_account_name Storage_account_resource_group Notes
MySubscription 1234fbd5-38c6-45ec-ab26-a0fc132f4b4a rg-Joseph linux78 rg-Joseph First subscription
EnterprisePRD 8769876 rg-2 storage2 rg-srotage2 secon subs
# Global variables
$configTableFilePath = "Z:\Mauricio\E\Trabajo\Microsoft\CSA\CAMS\C-AMS monitoring\configTable.csv"
$publicSettingsFilePath = "Z:\Mauricio\E\Trabajo\Microsoft\CSA\CAMS\C-AMS monitoring\publicSettings.json"
$protectedSettingsFilePath = "Z:\Mauricio\E\Trabajo\Microsoft\CSA\CAMS\C-AMS monitoring\protectedSettings.json"
# Connect
#Connect-AzAccount
# Read the table
# ---------------------------------------------------------
# Sign in to your Microsoft Azure subscription
# ---------------------------------------------------------
Connect-AzAccount
#VM subscription
Set-AzContext -SubscriptionId "fd8bab10-c92e-474d-8e64-0474b8980ec8"