Azure.Admin.Console.psd1
|
@{ RootModule = 'Azure.Admin.Console.psm1' ModuleVersion = '0.14.2' GUID = '9923da59-cf92-4a4a-b855-f59a088a3f09' Author = 'Chendrayan Venkatesan' CompanyName = 'Freelancer' Copyright = '(c) 2026 Chendrayan Venkatesan. Licensed under the MIT License.' Description = 'Azure admin reports and checks from PowerShell, over plain REST - no Az or Microsoft.Graph modules, no app registration. Get-AACAdvisorRecommendation: a consolidated, flattened Azure Advisor view (Cost, Security, Reliability, Operational excellence, Performance). Get-AACFirewallRule: every Azure Firewall Policy rule, searchable by source, destination, port and protocol (Allow green, Deny red). Show-AACResource and Show-AACCost: your resources and subscription costs, with a full resource inventory. Invoke-AACPSRule: PSRule for Azure (500+ Well-Architected rules), the module''s own rules and your custom rules on the live estate, with rules excluded by name or wildcard. Invoke-AACApplicationInsightQuery: Application Insights exceptions (or any KQL query) from a Log Analytics workspace or Application Insights resource, flattened. Get-AACInventory: the tenant as a tree (management groups, subscriptions, resource groups, resources) with Defender for Cloud secure scores and costs. Get-AACNetworkSecurityGroup: a detailed NSG assessment with findings by severity. Show-AACResourceMap: an interactive diagram of resource groups in the browser, saved as PNG or JPEG. Get-AACPolicyState: Azure Policy compliance for every resource, by management group, subscription or resource group. Get-AACSkuAvailability: which VM sizes you can use for VMs or AKS node pools in a region and its zones - restrictions, vCPU quota, AKS rules - and why not. Get-AACSecurityPosture: Defender for Cloud and Azure Policy - secure scores, recommendations, alerts, plans, regulatory and policy compliance. Get-AACEntraGroupMembership: Entra ID groups and everyone in them, nested groups included, one row per group and member (Microsoft Graph). Get-AACAssignedPolicy: every Azure Policy assignment with the default, assigned and effective value of each parameter and the resource types the policy applies to. Get-AACStorageAccountContainerSize: every blob container''s size, access tiers and largest blobs, read in parallel. Invoke-AACDefenderAssessment: Microsoft Defender for Cloud end to end - recommendations, attack paths, alerts, inventory, vulnerabilities, posture, compliance and settings - in a tabbed HTML report. Invoke-AACPolicyAssessment: Azure Policy assessed as a whole, initiatives opened up to their member policies. Every command: a colourful console view, objects, CSV and interactive HTML reports, and most a PDF. PDF export needs Windows and PowerShell 7.4+.' PowerShellVersion = '7.2' CompatiblePSEditions = @('Core') # PSRule for Azure is the only PowerShell module dependency. The console UI comes from # the vendored .\lib\Spectre.Console.dll (loaded directly via Add-Type in the # root module, MIT licensed, see .\lib\Spectre.Console.LICENSE), and Azure # access comes from plain REST calls (Invoke-RestMethod) against Azure # Resource Manager - no Az.* or Microsoft.Graph.* modules anywhere. PDF # reports use the vendored PDFsharp + MigraDoc assemblies in .\lib\pdf # (MIT, see lib\pdf\SOURCES.md), loaded only on export after a SHA-256 # check of every file. # PSRule.Rules.Azure (and PSRule, which it requires) powers # Invoke-AACPSRule. Importing it takes under a second and loads no # YamlDotNet.dll; the rules themselves run in a child pwsh process # (PSRule\PSRuleRunner.ps1), so PSRule's YamlDotNet never meets another # version of it (platyPS, powershell-yaml, Az.Aks) in the session. # Pester is not needed while Invoke-AACPester is parked (see Parked\). RequiredModules = @( @{ ModuleName = 'PSRule.Rules.Azure'; ModuleVersion = '1.47.0' } ) # How the objects look at the prompt: long text wrapped, not cut off. FormatsToProcess = @('Azure.Admin.Console.Format.ps1xml') FunctionsToExport = @( 'Connect-AAC' 'Deploy-AACStorageAccount' 'Disconnect-AAC' 'Get-AACAccessReview' 'Get-AACAdvisorRecommendation' 'Get-AACAssignedPolicy' 'Get-AACAttackPath' 'Get-AACChangeHistory' 'Get-AACComplianceGap' 'Get-AACConfigurationDrift' 'Get-AACCostAnomaly' 'Get-AACDependencyGraph' 'Get-AACDiagnosticSetting' 'Get-AACEntraGroupMembership' 'Get-AACFailoverReadiness' 'Get-AACFirewallRule' 'Get-AACInventory' 'Get-AACNetworkSecurityGroup' 'Get-AACPolicyState' 'Get-AACResourceUtilization' 'Get-AACSecurityPosture' 'Get-AACSkuAvailability' 'Get-AACStorageAccountContainerSize' 'Get-AACTerraformPlan' 'Invoke-AACAksAssessment' 'Invoke-AACApplicationInsightQuery' 'Invoke-AACAssessment' 'Invoke-AACDefenderAssessment' 'Invoke-AACHealthCheck' 'Invoke-AACLogAnalyticsWorkspaceAssessment' 'Invoke-AACM365Assessment' 'Invoke-AACPolicyAssessment' 'Invoke-AACPSRule' 'Invoke-AACVirtualNetworkAssessment' 'Show-AACCost' 'Show-AACDashboard' 'Show-AACJson' 'Show-AACResource' 'Show-AACResourceMap' ) CmdletsToExport = @() VariablesToExport = @() AliasesToExport = @() PrivateData = @{ PSData = @{ Tags = @('Azure', 'AzureAdvisor', 'AzureFirewall', 'CostManagement', 'Inventory', 'FirewallPolicy', 'ResourceGraph', 'Governance', 'EntraID', 'MicrosoftGraph', 'Groups', 'DefenderForCloud', 'Storage', 'BlobStorage', 'AzurePolicy', 'SecureScore', 'Report', 'PDF', 'CSV', 'ApplicationInsights', 'LogAnalytics', 'KQL', 'PSRule', 'WellArchitected', 'HTML', 'Compliance', 'SpectreConsole', 'Dashboard', 'ResourceHealth', 'JSON', 'REST', 'PKCE', 'PSEdition_Core', 'Windows', 'Linux', 'MacOS') ProjectUri = 'https://github.com/ChendrayanV/Azure.Admin.Console' LicenseUri = 'https://github.com/ChendrayanV/Azure.Admin.Console/blob/main/LICENSE' ReleaseNotes = 'v0.14.2 - NEW Show-AACDashboard: the estate on one screen - Resource Health, active Azure incidents, Advisor and what changed today. NEW Invoke-AACAssessment governance sheets. NEW ten commands for cost, security, operations, compliance and resilience: Get-AACCostAnomaly, Get-AACAttackPath, Get-AACAccessReview (with what to do per assignment; PIM only for people), Get-AACChangeHistory, Invoke-AACHealthCheck, Get-AACComplianceGap, Get-AACFailoverReadiness, Get-AACDependencyGraph, Get-AACResourceUtilization, Get-AACConfigurationDrift. NEW Show-AACJson. A shared status vocabulary and callouts across the console; progress lines fit narrow consoles. Get-AACEntraGroupMembership -CsvPath writes the one-row-per-group CSV (-CsvLayout Member for the previous one). Fixes to Invoke-AACM365Assessment. Full history: CHANGELOG.md.' } } } |