azure-powershell | Microsoft Azure PowerShell | Azure library
kandi X-RAY | azure-powershell Summary
kandi X-RAY | azure-powershell Summary
This repository contains PowerShell cmdlets for developers and administrators to develop, deploy, and manage Microsoft Azure applications.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of azure-powershell
azure-powershell Key Features
azure-powershell Examples and Code Snippets
Community Discussions
Trending Discussions on azure-powershell
QUESTION
I'm trying to update a bunch of dns cname entry, using azure-powershell.
I have no troubles getting the dns entry I need to update, but my problem starts when trying to update the cname (due to the fact there can be only one cname entry).
I went to azure documentation, and found about set-azdnsrecordset, but I failed to find the correct parameter/syntax to update the CNAME
Here is what I tried.
...ANSWER
Answered 2022-Feb-09 at 09:29One of the workaround to update CNAME records in Azure DNS
To update CNAME we have to remove the existing alias and then have to add a new one.
We have tried with below cmdlt
and updated the CNAME:
PowerShell Cmd:-
QUESTION
I am trying the sample code below.
https://docs.microsoft.com/ja-jp/azure/storage/blobs/storage-upload-process-images?tabs=javascript%2Cazure-powershell
I was able to move locally.
(Start URL: http: // localhost: 3000)
We are deploying the code to Azure Apps Service as a Zip file.
However, even if I access the site URL, it cannot be operated.
(Start URL: https: // {azure apps service} .azurewebsites.net)
I'm wondering if I should set Web.Config, but I don't know what to write.
If you know what to set in WebConfig with the above code, I would appreciate it if you could tell me.
Also, if there is a solution other than this, I would appreciate it if you could tell me that as well.
ANSWER
Answered 2022-Jan-18 at 06:34- I have followed the document which you have provided and it is working fine for me.
- I am able to upload images and check them in storage account.
"You do not have permission to view this directory or page."
The root reason can be there is no default page in your Azure website.
when you deploy the zip file via the azurewebsites.net/ZipDeployUI, make sure that you see the files being unzipped on the /wwwroot level.
If the files show up under /wwwroot/your-app-folder/ you may get this permission issue.
You could directly view the page with url.
QUESTION
I'm quite new to the Azure AD. So I will be grateful for any hint.
I need to enable members of a given domain (of a given Active Directory) to log in to Azure SQL Server using Azure Active Directory - Integrated Authentication.
So far I've logged into Windows and connected it to Azure Acticve Directory in Windows Setting.
Looking through the documentation, I understand that I need to select one of the authentication methods proposed by Microsoft within Azure Active Directory. The easiest seems to be Password hash synchronization. So I would like to pick this one (But if others are simpliest I am open to change that choice)
What is the easiest way to synchronise this? Can I avoid having to create a Windows Server VM and install Azure AD Connect there?
The current configuration of AD Connect on Azure Portal looks as follows:
To mention it again, the only service I care about is logging in via Azure Active Directory
I apologise if the whole question has been wrongly structured, but it is simply based on what I have found on the forums and in the documentation.
Thanks in advance for any tips
[for example: https://youtu.be/PyeAC85Gm7w?t=565, https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell#using-an-azure-ad-identity-to-connect-using-ssms-or-ssdt, https://techcommunity.microsoft.com/t5/azure-sql-blog/azure-ad-pass-through-and-password-hash-authentication-support/ba-p/1269735]
...ANSWER
Answered 2022-Jan-14 at 08:47You don't need Azure AD Connect or password hash sync unless you have an on-premise Windows Server AD that you want to sync to Azure AD. Should note that AD is not the same as Azure AD. You don't need Windows Server AD with Azure SQL, just Azure AD. To grant a certain security group access to the server, you can run CREATE USER [group-name-here] FROM EXTERNAL PROVIDER;
in the Azure SQL DB. Then you can use standard SQL stuff to grant that "user" access to the DB/tables.
Users should then use Azure Active Directory - Universal with MFA as the authentication method in SQL Server Management Studio.
QUESTION
I'm trying to run a PowerShell script in Azure Yaml Pipelines and I'm getting this error:
...ANSWER
Answered 2021-Nov-29 at 19:31Couldn't help noticing but you have used the forward slash "/" as the seperator for the filepath instead of a back-slash "\" like in the example you are pointing to in the azure docs :
QUESTION
I've created and published (to Azure) a working and fairly simple Azure Function App (HTTP Trigger) which inserts data retrieved from an API call to an Azure SQL database after authenticating via User identity (if testing locally) or Managed Identity (when running on VM).
Everything is functional, however, I now need to encrypt one of the SQL table columns which I have done using SSMS. The next step as I understand it is authenticating a provider to access the CMK via Azure Key Vault (I'm following this Microsoft guide).
I'm wondering in the following code how to InitializeAzureKeyVaultProvider without using applicationId and clientKey from Azure App registration resource, but with a user or managed identity role. Or, if there's any other way to get/use applicationId, and clientKey without creating/using an Azure App registration resource.
Is there a newer / easier way to access Azure Key Vault for Always Encrypted Columns sql queries?
...ANSWER
Answered 2021-Oct-08 at 11:45It is not possible to use applicationId
and clientKey
without creating or using an Azure App registration resource. There is an alternative way where you can pass clientId
and clientSecret
as shown below, but here also you will need application registration.
QUESTION
I've just opened PowerShell and ran:
...ANSWER
Answered 2021-Sep-09 at 16:15I think installing the Azure CLI resolved it.
I've literally only done these things since posting.
- Installed the Google Cloud CLI and GCP SDK.
- Spend 10 hours reading the GCP documentation on a bunch of stuff because I was interested in seeing how green their grass really is.
- Tried and failed to install a different Az PS package as request by someone on the Github issue.
- Tried and successfully installed the Microsoft.Graph PS package, again as a test requested by my Github friend.
- Installed the Azure CLI via MSI.
- Read the comment from @BhargaviAnnadevara and tried it and saw that it all worked.
QUESTION
I looked in the ms docs but couldn't find any suggestions on how to document a Cmdlet written in C# in a way that I can get the comments in PS via Get-Help
or other commands.
I found some blog posts that point to XmlDoc2CmdletDoc. I played a bit with it and it does the job but I find my code got a bit bulkier from the comments. Is this the way to go? I saw in the Az repository that they use some external markdown files. What would be the appropriate direction?
...ANSWER
Answered 2021-Jul-05 at 20:15(Compiled) cmdlets require external help files, which must be represented in a "noisy", complex XML-based markup format called MAML
- By contrast, comment-based help is only supported in written-in-PowerShell cmdlets (a.k.a. advanced functions / scripts).
The most convenient way to author such help files is via the PlatyPS
module, which allows authoring topics in Markdown format.
While compiled cmdlets can act as PowerShell modules by themselves, it is preferable to package them as directory-based modules, which is indeed required if you want to include MAML help files (*-Help.xml
).
Directory-based modules also allow you to include conceptual help topics, which, however, are mere plain-text files (about_*.txt
).
Note that directory-based modules composed of written-in-PowerShell cmdlets too can opt to ship their help via MAML help files (and provide conceptual help topics), but using comment-based help is more convenient.
QUESTION
Main goal I am trying to find a way to add licenses to a user using ubuntu linux; either by powershell or any other programmable method. My last resort is to use selenium with python.
Actual problem
I am trying to use Connect-MgGraph
cmdlet with a certificate for unattended scripts. The information on this is here: https://docs.microsoft.com/en-us/graph/powershell/app-only?tabs=azure-portal
I already have app registered with exchange and admin access. I also already have a cert. I used it before when connecting to exchange online powershell.
When I try to run: Connect-MgGraph -ClientID $ApplicationId -TenantId $TenantId -CertificateName $Certificate
It Gives me an error: certificate was not found or has expired.
Here us what I tried:
I first tried using the certpath as a variable and then passing that - failed
...ANSWER
Answered 2021-Jun-19 at 06:24-CertificateName
should be the subject name of the cert, not the path to the cert. But, you should probably try using the thumbprint instead. I think you're missing some more code for installing the cert. Try something like this, substituting your details in the beginning to generate the correct PFX. (i.e. Make sure key.pem and cert.pem exist in /etc/ssl/private/)
QUESTION
I am able to access sql server azure from my .net core application running in app service by using AAD authentication. To be able to do so it was necessary to register user assigned managed identity in sql server and it was done by following steps in this article . In addition, it was necessary to specify AzureServicesAuthConnectionString (RunAs=App;AppId=c5309486-960d-46f4-bbea-XXX) to allow applicaiton code to request authentication token from Azure token provider, more info here
Now I am trying to migrate my application into AKS cluster. I am following instructions from https://www.cloudiqtech.com/implementing-azure-ad-pod-identity-in-aks-cluster/ to install Azure identity into cluster by using kubernetess application https://github.com/Azure/aad-pod-identity After all configuration was created, I also added AzureServicesAuthConnectionString to config map but the application fails with the following message :
An error occurred seeding the DB.
System.AggregateException: One or more errors occurred. (Parameters: Connection String: RunAs=App;AppId=a349660d-cbfd-45fc-a917-XXX, Resource: https://database.windows.net/, Authority: . Exception Message: Tried to get token using Managed Service Identity. Access token could not be acquired. The operation was canceled.)
---> Microsoft.Azure.Services.AppAuthentication.AzureServiceTokenProviderException: Parameters: Connection String: RunAs=App;AppId=a349660d-cbfd-45fc-a917-XXX, Resource: https://database.windows.net/, Authority: . Exception Message: Tried to get token using Managed Service Identity. Access token could not be acquired. The operation was canceled.
at Microsoft.Azure.Services.AppAuthentication.AzureServiceTokenProvider.GetAuthResultAsyncImpl(String resource, String authority, Boolean forceRefresh, CancellationToken cancellationToken)
at Microsoft.Azure.Services.AppAuthentication.AzureServiceTokenProvider.GetAccessTokenAsync(String resource, String tenantId, Boolean forceRefresh, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
at System.Threading.Tasks.Task`1.get_Result()
at MvcMovie.DataAccess.MovieContext..ctor(DbContextOptions`1 options)
at MvcMovie.DataAccess.SeedData.Initialize(IServiceProvider serviceProvider)
at MvcMovie.Program.Main(String[] args)
...ANSWER
Answered 2021-May-03 at 17:38From AAD Pod Identity for Kubernetes documentation: AKS and aks-engine clusters require an identity to communicate with Azure. This identity can be either a managed identity (in the form of system-assigned identity or user-assigned identity) or a service principal. This section explains various role assignments that need to be performed before using AAD Pod Identity. Without the proper role assignments, your Azure cluster will not have the correct permission to assign and un-assign identities from the underlying virtual machines (VM) or virtual machine scale sets (VMSS).
I was missing the following role assignemt to the cluster system assigned managed identity:"Managed Identity Operator", "Virtual Machine Contributor"
In addition the user assigned managed identity that accesses data bases needs to be created within the same resource group that AKS cluster was created in.
QUESTION
I am trying to set user assigned identities to a azure web app via the Az Powershell module
Here is my attempt with Set-AzResource which does not work
...ANSWER
Answered 2021-Apr-23 at 01:26As the document shows, the current version of the Azure PowerShell commandlets for Azure App Service do not support user-assigned identities.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install azure-powershell
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page