Resource Type: Azure > Resource Group

Controls

The primary controls for Azure > Resource Group are:

• CMDB
• Configured
• Discovery
• Intelligent Assessment
• ServiceNow
• Stack
• Stack [Native]
• Tags

It is also targeted by these controls:

• Azure > AI Foundry > Account > Discovery
• Azure > AKS > Managed Cluster > Discovery
• Azure > Alerts Management > Smart Detector Alert Rule > Discovery
• Azure > API Management > API Management Service > Discovery
• Azure > App Service > App Service Plan > Discovery
• Azure > App Service > Connection > Discovery
• Azure > App Service > Function App > Discovery
• Azure > App Service > Web App > Discovery
• Azure > Application Gateway Service > Application Gateway > Discovery
• Azure > Application Insights > Application Insight > Discovery
• Azure > Automation > Automation Account > Discovery
• Azure > Bot Service > Bot > Discovery
• Azure > CIS v2.0 > 10 - Miscellaneous > 10.01 - Ensure that Resource Locks are set for Mission-Critical Azure Resources
• Azure > CIS v3.0 > 10 - Miscellaneous > 10.01 - Ensure that Resource Locks are set for Mission-Critical Azure Resources
• Azure > CIS v4.0 > 07 - Management and Governance > 07.02 - Ensure that Resource Locks are set for Mission-Critical Azure Resources
• Azure > Cognitive Services > Account > Discovery
• Azure > Compute > Availability Set > Discovery
• Azure > Compute > Disk > Discovery
• Azure > Compute > Disk Encryption Set > Discovery
• Azure > Compute > Image > Discovery
• Azure > Compute > Snapshot > Discovery
• Azure > Compute > Ssh Public Key > Discovery
• Azure > Compute > Virtual Machine > Discovery
• Azure > Compute > Virtual Machine Scale Set > Discovery
• Azure > Container Registry > Registry > Discovery
• Azure > Cosmos DB > Database Account > Discovery
• Azure > Data Factory > Factory > Discovery
• Azure > Databricks > Workspace > Discovery
• Azure > DNS > Zone > Discovery
• Azure > Firewall > Firewall > Discovery
• Azure > Front Door > Front Door > Discovery
• Azure > Key Vault > Vault > Discovery
• Azure > Load Balancer > Load Balancer > Discovery
• Azure > Log Analytics > Log Analytics Workspace > Discovery
• Azure > Managed Identity > User Assigned Identity > Discovery
• Azure > Monitor > Action Group > Discovery
• Azure > Monitor > Alerts > Discovery
• Azure > Monitor > Data Collection Endpoint > Discovery
• Azure > Monitor > Metric Alert > Discovery
• Azure > Monitor > Stack
• Azure > MySQL > Flexible Server > Discovery
• Azure > MySQL > Server [Deprecated] > Discovery
• Azure > Network > Application Security Group > Discovery
• Azure > Network > Bastion Host > Discovery
• Azure > Network > Express Route Circuits > Discovery
• Azure > Network > NAT Gateway > Discovery
• Azure > Network > Network Interface > Discovery
• Azure > Network > Network Security Group > Discovery
• Azure > Network > Private DNS Zones > Discovery
• Azure > Network > Private Endpoints > Discovery
• Azure > Network > Private Link Service > Discovery
• Azure > Network > Public IP Address > Discovery
• Azure > Network > Route Table > Discovery
• Azure > Network > Virtual Network > Discovery
• Azure > Network > Virtual Network Gateway > Discovery
• Azure > Network > Web Application Firewall Policy > Discovery
• Azure > Network Watcher > Network Watcher > Discovery
• Azure > Policy Assignment > Discovery
• Azure > PostgreSQL > Flexible Server > Discovery
• Azure > PostgreSQL > Server > Discovery
• Azure > Recovery Service > Vault > Discovery
• Azure > Redis > Redis Cache > Discovery
• Azure > Relay > Namespace > Discovery
• Azure > Search Management > Search Service > Discovery
• Azure > Service Bus > Namespace > Discovery
• Azure > SignalR Service > SignalR > Discovery
• Azure > SQL > Managed Instance > Discovery
• Azure > SQL > Server > Discovery
• Azure > SQL Virtual Machine Service > SQL Virtual Machine > Discovery
• Azure > Storage > Storage Account > Discovery
• Azure > Synapse Analytics > Workspace > Discovery

Quick Actions

• Router
• Set Tags

Category

• Cloud > Resource Group

In Your Workspace

• Controls by Resource Type report
• Policy Settings by Resource Type report
• Resources by Resource Type report

Developers

Resource Type URI

tmod:@turbot/azure#/resource/types/resourceGroup

Category URI

tmod:@turbot/turbot#/resource/categories/cloudResourceGroup

GraphQL

query resource(id: "tmod:@turbot/azure#/resource/types/resourceGroup") { … }

query resourceActivities(filter: "resourceId:'tmod:@turbot/azure#/resource/types/resourceGroup'") { … }

mutation createResource(input: { … })

mutation updateResource(input: { … })

CLI

Get Resource

turbot graphql resource --id "tmod:@turbot/azure#/resource/types/resourceGroup"

Steampipe Query

Get Resource

select * from guardrails_resource where resource_type_uri = 'tmod:@turbot/azure#/resource/types/resourceGroup';

Get Policy Settings (By Resource ID)

select * from guardrails_policy_setting where filter = 'resourceTypeId:"tmod:@turbot/azure#/resource/types/resourceGroup"';

Get Resource Notification

select * from guardrails_notification where resource_type_uri = 'tmod:@turbot/azure#/resource/types/resourceGroup' and notification_type in ('resource_updated', 'resource_created');