Powershell query to extract azure disk encryption info

Question

In azure management group, i want to find the list of all azure disks, with their subscription id , VM name and azure disk encryption info (like platform managed or azure disk encrypted).Do we have a powershell query to fetch such info. Or can we write azure graph explorer query to get disk encryption info and other details. Specific examples would help ..not generic example

Answer 1

Hello @MS Techie ,

Can you take a look at the below?

https://learn.microsoft.com/en-us/answers/questions/1162949/write-a-query-to-see-what-disks-are-encrypted-with

That has the Kusto query which you can run in Azure group explorer which will give all the details of disk encryption information (CMK & MMK) . Take a look at the 2 queries and you can tweak that properties column to filter out the corresponding values !

Let us know if you need additional help on this !

Regards,

Shiva.

Answer 2

Hello @MS Techie ,

Below is the final query which will also display Management Group Name

resources | where type == "microsoft.compute/disks"
|extend properties=parse_json(properties), DiskName=name
| extend encryptiondisktype=properties.encryption.type , DiskName=name,VMName = split(managedBy,"/")[8]
| join kind=leftouter 
(
    ResourceContainers
    | where type =~ 'microsoft.resources/subscriptions'
    | extend properties=parse_json(properties)
    | project SubName=properties.managementGroupAncestorsChain[0].displayName , subscriptionId, managementgroupname = properties.managementGroupAncestorsChain[0].displayName
    | project SubName, subscriptionId,managementgroupname
)
on $left.subscriptionId == $right.subscriptionId
| project DiskName ,VMName, SubName,subscriptionId,encryptiondisktype,managementgroupname

Let us know if you need additional help.

Regards,

Shiva.