about scaleset

Question

Please ask the following questions.

・How to set the uniform mode JIT function

・The reason why the JIT function cannot be used in flexible mode (because it should be available as a normal VM, and it is also displayed in the list of VMs that apply the JIT function in Microsoft Defender for Servers. Please answer if possible.)

・Whether it is possible to SSH into a uniform mode or flexible mode instance using Azure CLI.

・Is it possible to collect logs of scaled-out instances in uniform mode and flexible mode respectively?

・What is the reason for limited functionality in uniform mode instances?

Accept answer

Answer 1

I can help you with those questions regarding Azure Virtual Machine Scale Sets.

1. How to set the uniform mode JIT function? The uniform mode JIT function is enabled by default when you create a Virtual Machine Scale Set (VMSS) in Azure. You can further configure the JIT function by selecting the "Just-In-Time" option under the "Security" section of your VMSS in the Azure portal.
2. The reason why the JIT function cannot be used in flexible mode (because it should be available as a normal VM, and it is also displayed in the list of VMs that apply the JIT function in Microsoft Defender for Servers. Please answer if possible.) The JIT function is not currently supported in flexible mode because the architecture of flexible mode VMs differs from that of uniform mode VMs. While the JIT function is available for individual VMs, it is not yet available for VMs in a flexible mode VMSS.
3. Whether it is possible to SSH into a uniform mode or flexible mode instance using Azure CLI. Yes, you can SSH into both uniform mode and flexible mode instances using the Azure CLI. You can use the az vmss list-instance-connection-info command to get the connection information for your instances, and then use the ssh command to connect to the instance.
4. Is it possible to collect logs of scaled-out instances in uniform mode and flexible mode respectively? Yes, you can collect logs from both uniform mode and flexible mode instances using Azure Monitor. You can configure Azure Monitor to collect logs from your instances, and then use Log Analytics to analyze and query the logs.
5. What is the reason for limited functionality in uniform mode instances? Uniform mode instances are designed to provide a simplified, uniform environment for running applications at scale. This means that some features and configurations are not available on uniform mode instances, in order to ensure consistency and scalability. However, uniform mode instances are still highly configurable and can be customized to meet the needs of your applications. please accept question

Answer 2

1. How to set the uniform mode JIT function? The uniform mode JIT function is enabled by default when you create a Virtual Machine Scale Set (VMSS) in Azure. You can further configure the JIT function by selecting the "Just-In-Time" option under the "Security" section of your VMSS in the Azure portal.

I can't find the security tab.