Resources
Subscriptions, resource groups and resources, from the subscriptions you chose when you added the tenant.
Azure
Resources, Access and Cost in Azure
See every subscription, resource group and resource, report on access, cost and exposure, and, once you allow it, change what needs it.
What you can see
Access and exposure
Role assignments and privileged access, and what's open to the internet, from network rules to SQL servers.
Cost and waste
Cost by service and by resource group, budgets, Advisor recommendations and resources not in use.
How it works
See it, report on it, change it
Add the tenant
Sign in once as an administrator and choose the subscriptions Altivane can read.
Load the resources
Filter, export to Excel or CSV, or run reports to a workbook.
Run a change
Once an administrator allows changes in Azure, select the resources and the change, check the window, then Run.
Reports
Reports run to 1 Excel workbook, a sheet for each table.
Scorecard reports
Rated OK, Warning or Critical against thresholds you set, with a section in the client's document when you build documents.
- Azure Access
- Azure Storage Account Security
- Azure Network Exposure
- Azure SQL Server Security
- Azure Key Vault Security
- Azure Web App Security
- Azure Resources Not in Use
- Azure Governance
- Azure Advisor
Inventory
- Azure Subscriptions
- Azure Resource Groups
- Azure Resources
- Azure Resources by Type
- Azure Tags
- Azure Locks
Access
- Azure Role Assignments
- Azure Privileged Access
- Azure Access to Review
Cost
- Azure Cost by Service
- Azure Cost by Resource Group
- Azure Budgets
- Azure Advisor Recommendations
- Azure Unused Resources
Security
- Azure Storage Accounts
- Azure Network Rules Open to the Internet
- Azure SQL Servers
- Azure Key Vaults
- Azure Web Apps
- Azure Virtual Machines
- Defender for Cloud Plans
- Azure Policy Non-Compliance
Activity
- Azure Resource Changes
- Azure Activity Log
- Azure Service Health
Changes
Select the items, then the change. A window shows what it does, the items and the tenant, and Run makes it. Each change goes in the change log.
Adding the tenant gives Altivane read access. Changes run once an administrator gives it an Azure role that allows them.
Virtual machines and disks
- Start a virtual machine
- Stop a virtual machine
- Restart a virtual machine
- Resize a virtual machine
- Set a virtual machine's daily shutdown
- Take a snapshot of a disk
- Change a disk's type
Web apps
- Start a web app
- Stop a web app
- Restart a web app
- Set a web app's HTTPS only
- Set a web app's minimum TLS version
- Set a web app's FTP access
Storage accounts
- Require TLS 1.2 on a storage account
- Require HTTPS on a storage account
- Block public blob access on a storage account
- Set shared key access on a storage account
- Set public network access on a storage account
- Set blob soft delete on a storage account
Network and SQL
- Limit a network security rule's source
- Remove a network security rule
- Set a SQL server's minimum TLS version
- Set public network access on a SQL server
- Add a SQL server firewall rule
- Remove a SQL server firewall rule
Key vaults
- Set public network access on a key vault
- Turn on purge protection on a key vault
Tags and locks
- Set a tag
- Remove a tag
- Copy the resource group's tags
- Add a lock
- Remove a lock
Move and delete
- Move to another resource group
- Delete a resource group
- Delete a resource
From a CSV file
Each runs over the rows of a CSV file, as a workflow made from the change.
- Create resource groups
Workflows
Repeat a task the same way each time, manually or on a schedule.
Sample workflows
Start from a sample and adapt it. A test run shows each change without making it.
- Monthly Azure Review
- Close Azure Management Ports Open to the Internet
- Require HTTPS on Azure Web Apps
Azure guides
Everyday tasks shown 3 ways: PowerShell, the admin centre and Altivane.
Azure governance
How to export the activity log in Azure
Azure governance
How to find recent resource changes in Azure
Azure resource management