#GlobalAzure

Azure Automation Invades Your Data CentreKieran Jacobsen@kjacobsen

THE BIGGEST MICROSOFT AZURE COMMUNITY EVENT

150+LOCATIONS50+ COUNTRIES10000+ PEOPLE

Our Sponsors!

Kieran Jacobsen• Technical Lead @ Readify• Background – Infrastructure, Security, Automation• Blog @ poshsecurity.com

■Azure Automation■Concepts■Azure Worker Limitations■Hybrid Workers■Hybrid Worker Groups■Hybrid Worker Limitations■Webhooks

Agenda

■Managed service■Public cloud focus■PowerShell■Highly available

Azure Automation

■Automation Account■Runbooks■Assets■Jobs■Workers

Concepts

Demo

■Limited to specifying which Azure region■Cannot be connected to Azure virtual networks■No control over IP address■Limited control over make up of Azure worker

Azure Worker Limitations

■Runbooks running within your DC■Uses OMS■Support script, workflow and graphical runbooks■No inbound firewall requirements

Hybrid Workers

Demo

■Collections of workers■Runbooks are executed against groups■Ideal for providing HA■Share “run as” permissions

Hybrid Worker Groups

Demo

■Module Deployment■Execution context■No simple file or event triggers■No prioritization of workers in a group■Documentation■Troubleshooting can be a challenge

Hybrid Worker Limitations

■Start jobs from HTTPS requests■Idea for application and 3rd party integration■Great for starting jobs if Azure CMDLets are not installed■Runbooks may need modifications to run from webhooks

Webhooks

Demo

■My site: https://poshsecurity.com ■Runbooks from this presentation:

https://github.com/poshsecurity/PoshSecurityAzureAutomation ■Hybrid Workers:

https://azure.microsoft.com/en-us/documentation/articles/automation-hybrid-runbook-worker/

■Webhooks: http://blog.coretech.dk/jgs/azure-automation-using-webhooks-part-1-input-data/

■Azure Automation Authoring Toolkit: https://www.powershellgallery.com/packages/AzureAutomationAuthoringToolkit

Links

Kieran Jacobsen

Questions?

• Poshsecurity.com•@kjacobsen

Evaluations: http://aka.ms/melgabpro6

Thanks!