Azure虚拟机先决条件数据自动化采集：工具、语言及示例咨询

Hey there! Let's break down how to automate fetching those Azure VM prerequisites you need—IP addresses, subnet IDs, VPN associations, OS names, and more. Here's my recommended approach based on real-world Azure automation workflows:

首选工具与语言选择 #

Top Tools to Use #

• Azure CLI: The lightest, most cross-platform option for quick automation scripts. No heavy development setup required, just run commands directly in your terminal.
• Azure PowerShell: Ideal if you're working in a Windows environment or already familiar with PowerShell syntax. It has deeply integrated Azure modules tailored for cloud administration.
• Azure SDKs: For custom applications or complex workflows where you need full control over data processing and integration.

Priority Development Language #

Python is my top pick here, and here's why:

• The Azure SDK for Python is mature, well-documented, and has a huge community supporting it.
• It's cross-platform (works on Windows, Linux, macOS) so your scripts run anywhere.
• Handling and exporting data (like saving results to CSV/JSON) is straightforward with Python's built-in libraries.

Practical Examples #

1. Azure CLI (Quick & Dirty) #

Perfect for one-off or scheduled batch jobs. Run these commands to get a clean table of VM details:

# Core VM details: Name, OS, Private IP, Subnet ID
az vm list --query "[].{VMName:name, OS:storageProfile.osDisk.osType, PrivateIP:privateIps, SubnetID:networkProfile.networkInterfaces[0].ipConfigurations[0].subnet.id}" --output table

# Check VPN gateway association for the VM's VNet
az network vnet list --query "[].{VNetName:name, VPNGateway:virtualNetworkGateway.id}" --output table

To save results to a CSV, just append > vm_prerequisites.csv to the end of either command.

2. Python SDK (Customizable & Scalable) #

This script gives you full control to process data as needed. First, install the required packages:

pip install azure-mgmt-compute azure-mgmt-network azure-identity

Then run this script (replace 你的订阅ID with your actual Azure subscription ID):

from azure.identity import DefaultAzureCredential
from azure.mgmt.compute import ComputeManagementClient
from azure.mgmt.network import NetworkManagementClient

# Initialize Azure clients using default credentials (supports CLI login, service principals, etc.)
subscription_id = "你的订阅ID"
credential = DefaultAzureCredential()
compute_client = ComputeManagementClient(credential, subscription_id)
network_client = NetworkManagementClient(credential, subscription_id)

# Fetch all VMs in the subscription
all_vms = compute_client.virtual_machines.list_all()

for vm in all_vms:
    print(f"=== 虚拟机: {vm.name} ===")
    print(f"操作系统类型: {vm.storage_profile.os_disk.os_type}")
    
    # Get network interface details
    nic_resource_id = vm.network_profile.network_interfaces[0].id
    nic_name = nic_resource_id.split("/")[-1]
    resource_group = nic_resource_id.split("/")[4]
    nic = network_client.network_interfaces.get(resource_group, nic_name)
    
    # Extract private IP and subnet ID
    private_ip = nic.ip_configurations[0].private_ip_address
    subnet_id = nic.ip_configurations[0].subnet.id
    print(f"私有IP地址: {private_ip}")
    print(f"子网ID: {subnet_id}")
    
    # Check if the VM's VNet has a VPN gateway attached
    vnet_resource_path = "/".join(subnet_id.split("/")[0:-2])  # Strip subnet path to get VNet ID
    vnet_rg = vnet_resource_path.split("/")[4]
    gateways = network_client.virtual_network_gateways.list(vnet_rg)
    has_vpn_gateway = any(gw for gw in gateways if gw.virtual_network.id == vnet_resource_path)
    print(f"关联VPN网关: {'是' if has_vpn_gateway else '否'}")
    print("")

3. Azure PowerShell (Windows-Friendly) #

Great if you're already using PowerShell for Azure administration:

# Login to Azure (skip if already authenticated)
Connect-AzAccount

# Fetch all VMs
$vms = Get-AzVM

foreach ($vm in $vms) {
    Write-Host "=== 虚拟机: $($vm.Name) ==="
    Write-Host "操作系统类型: $($vm.StorageProfile.OsDisk.OsType)"
    
    # Get network interface
    $nic = Get-AzNetworkInterface -ResourceId $vm.NetworkProfile.NetworkInterfaces[0].Id
    Write-Host "私有IP地址: $($nic.IpConfigurations.PrivateIpAddress)"
    Write-Host "子网ID: $($nic.IpConfigurations.Subnet.Id)"
    
    # Check for VPN gateway on the VNet
    $vnetId = $nic.IpConfigurations.Subnet.Id -replace "/subnets/.*", ""
    $gateway = Get-AzVirtualNetworkGateway -ResourceGroupName ($vnetId.Split("/")[4]) | Where-Object { $_.VirtualNetwork.Id -eq $vnetId }
    Write-Host "关联VPN网关: $(if ($gateway) { '是' } else { '否' })"
    Write-Host ""
}

Quick Notes #

• Make sure your account has the Reader role (or higher) for the Azure resources you're querying.
• For multi-subscription environments, loop through subscription IDs using az account set --subscription <ID> (CLI) or Select-AzSubscription (PowerShell).
• All these scripts can be scheduled using Azure Automation, cron (Linux), or Task Scheduler (Windows) for regular audits.

内容的提问来源于stack exchange，提问作者Parth Makwana