Update snapshot Property by using Azure Automation account

Hanh Trinh 41

Hello,

I have a Backup vault that takes snapshot for OS disks and shared disks everyday, during 14 days.

When checking the snapshot file, the network setting is enabled public access from all network. Because there are a lot of snapshot file that I need to change network setting to Disable public and private access, so I can't do it manually.

Look forward for so a solution change network setting by using Automation account, please .

Below is my script in automation account, but it was failed :

$snapshotnames = (Get-AzSnapshot -resourceGroupName 'td.hanh').Name

az snapshot update -snapshotnames $snapshot --network-access-policy DenyAll

SadiqhAhmed-MSFT 38,891 Reputation points Microsoft Employee

2024-04-24T14:54:47.86+00:00

Hello @Hanh Trinh Thank you for reaching out to us on Microsoft Q&A platform. Happy to assist you with your concern.

Based on the information provided, I see that you want to change the network settings for disabling public access to the snapshot file.

Seems like the AZ command is incorrect, variable used in the update command for snapshotnames $snapshot differs than what you set in first step $snapshotnames and it looks like you need to call resource group in the update.

Command that I tried and it worked:

az snapshot update --name $snapshotnames --resource-group rgname --network-access-policy DenyAll

Hope this helps. Let us know how it goes!

If the response helped, do "Accept Answer" and up-vote it
Hanh Trinh 41 Reputation points

2024-04-25T04:17:23.61+00:00

Hi SadiqhAhmed-MSFT,

It was my typo. I corrected and tried it again, but it still failed : unrecognized arguments: snapshot-test1 (my snapshot name )
SadiqhAhmed-MSFT 38,891 Reputation points Microsoft Employee

2024-05-02T09:52:24.5033333+00:00

@Hanh Trinh Sorry for the delayed response.

It is probably the issue with the snapshot name captured in variable $snapshotnames which could be holding multiple snapshot names as you are running against the resource group.

Can you confirm if you are trying for individual snapshot or for multiple snapshots? if multiple then I guess you need to use for each loop.

Hanh Trinh 41

Hello,

I've resolved it

I changed my script a bit, then it works well :

Get-AzResource -ResourceGroupName $resourceGroupName -TagName "CreatedBy" -TagValue "AzureBackup" | foreach{
            if($_.ResourceType -match "Microsoft.Compute/snapshots"){
                $name = $_.Name
                $snapshotupdateconfig = New-AzSnapshotUpdateConfig -NetworkAccessPolicy DenyAll
                Update-AzSnapshot -ResourceGroupName $resourceGroupName -SnapshotName $name -SnapshotUpdate $snapshotupdateconfig

SadiqhAhmed-MSFT 38,891 Reputation points Microsoft Employee

2024-05-09T09:08:34.98+00:00

@Hanh Trinh Thank you for the update. Glad to know you were able to resolve the issue.

I will re-post your comment as answer, so it helps others looking for solution to a similar issue.

1 answer

SadiqhAhmed-MSFT 38,891 Microsoft Employee

Posting the answer on behalf @Hanh Trinh to benefit others looking for solution to a similar issue.

Get-AzResource -ResourceGroupName $resourceGroupName -TagName "CreatedBy" -TagValue "AzureBackup" | foreach{
            if($_.ResourceType -match "Microsoft.Compute/snapshots"){
                $name = $_.Name
                $snapshotupdateconfig = New-AzSnapshotUpdateConfig -NetworkAccessPolicy DenyAll
                Update-AzSnapshot -ResourceGroupName $resourceGroupName -SnapshotName $name -SnapshotUpdate $snapshotupdateconfig

Hope this helps!

If the response helped, do "Accept Answer" and up-vote it

Share via

Update snapshot Property by using Azure Automation account

1 answer