An easy way to identify the "resource providers" that are specifically associated to any particular Azure service?

Question

An easy way to identify the "resource providers" that are specifically associated to any particular Azure service?

Glenn Hunter 125 Microsoft Employee

The problem is that resource providers needs to be registered and if the customer miss to register all of them, a new process of approvals needs to be undertaken, hence creating a lot of lead for customer.

So an example would be to deploy AKS: I need the following resource providers to be registered:

Microsoft.ContainerService
Microsoft.Compute/virtualMachineScaleSets
Microsoft.Network/loadBalancers
Microsoft.Network/networkInterfaces/ipConfigurations
Microsoft.Network/networkSecurityGroups
Microsoft.Network/privateEndpoints
Microsoft.Network/virtualNetworks

Therefore I am trying to find an easy way to identify all the necessary "Resource Providers" that are specifically associated to any particular Azure service?

2 answers

Your answer

Answer 1

Marcin Policht 51,055 MVP Volunteer Moderator

Review the ARM/Bicep templates used to provision these resources - in particular, the resources section of the template would include all of them

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Glenn Hunter 125 Reputation points Microsoft Employee

2024-05-17T07:50:05.23+00:00

Thanks Marcin, however, could you provide the example ARM template reference?
Marcin Policht 51,055 Reputation points MVP Volunteer Moderator

2024-05-17T10:33:22.4766667+00:00

You should be able to find one for every single resource type on MS Learn

https://learn.microsoft.com/en-us/azure/aks/learn/quick-kubernetes-deploy-rm-template?tabs=azure-cli

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Glenn Hunter 125 Reputation points Microsoft Employee

2024-05-20T16:36:54.7966667+00:00

Thanks for your reply, but maybe I haven't explained the question sufficiently enough. For example, I know the RP "ContainerService" is associated with AKS and is defined in the script, and when you deploy the script it automatically deploys/registers other related RP that are required or needed for AKS... these being for example.. (which are not defined in the script) Microsoft.Compute/virtualMachineScaleSets, Microsoft.Network/loadBalancers, Microsoft.Network/networkInterfaces/ipConfigurations, Microsoft.Network/networkSecurityGroups, Microsoft.Network/privateEndpoints, Microsoft.Network/virtualNetworks

I am trying to find a way to identify (if possible) all the other related/required RPs that are connected to "AKS" in this example.. I hope this makes sense?
Glenn Hunter 125 Reputation points Microsoft Employee

2024-05-21T07:27:15.3966667+00:00

I would like to be able to know what resource providers that are needed and what resources that are going to be deployed based on an ARM/Bicep template. For example, AKS bicep template will deploy VMSS and more.

We would then use that information to add to the Azure Policy for the allowed resource types:

{

"properties": {

    "displayName": "Allowed resource types",

    "policyType": "BuiltIn",

    "mode": "Indexed",

    "description": "This policy enables you to specify the resource types that your organization can deploy. Only resource types that support 'tags' and 'location' will be affected by this policy. To restrict all resources please duplicate this policy and change the 'mode' to 'All'.",

    "metadata": {

      "version": "1.0.0",

      "category": "General"

    },

    "version": "1.0.0",

    "parameters": {

      "listOfResourceTypesAllowed": {

        "type": "Array",

        "metadata": {

          "description": "The list of resource types that can be deployed.",

          "displayName": "Allowed resource types",

          "strongType": "resourceTypes"

        }

      }

    },

    "policyRule": {

      "if": {

        "not": {

          "field": "type",

          "in": "[parameters('listOfResourceTypesAllowed')]"

        }

      },

      "then": {

        "effect": "deny"

      }

    },

    "versions": [

      "1.0.0"

    ]

},

"id": "/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c",

"type": "Microsoft.Authorization/policyDefinitions",

"name": "a08ec900-254a-4555-xxxx-xxxxxxx"
Anveshreddy Nimmala 3,550 Reputation points Moderator

2024-05-22T01:21:07.2866667+00:00

Hello Glenn Hunter,

According to my understanding we can know that what resources are being created is can know by checking resource section of template and type parameter mentioned on the resources column , if you want know what are actual depended resources / parameters required and what are optional parameters required like we get it in terraform through terraform registry, we can get them through the official microsoft documentation

Answer 2

Hello Glenn Hunter,
Thanks for your question.

You can find this in the ARM template reference here under (Sample Azure Services):

https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/

If you want a specific template, for example for kubernetes and Containers you can find it here:

https://learn.microsoft.com/en-us/azure/aks/learn/quick-kubernetes-deploy-rm-template?toc=%2Fazure%2Fazure-resource-manager%2Ftemplates%2Ftoc.json&tabs=azure-cli

Please let me know if you have further questions**

You can mark it 'Accept Answer' if this helped.

Share via

An easy way to identify the "resource providers" that are specifically associated to any particular Azure service?

2 answers

Your answer