Azure Automation Invades Your Data Centre Kieran Jacobsen

Azure Automation Invades Your Data Centre Kieran Jacobsen @kjacobsen #Global. Azure

THE BIGGEST MICROSOFT AZURE COMMUNITY EVENT 150+LOCATIONS 50+ COUNTRIES 10000+ PEOPLE

Our Sponsors!

Kieran Jacobsen • Technical Lead @ Readify • Background – Infrastructure, Security, Automation • Blog @ poshsecurity. com

Agenda ■Azure Automation ■Concepts ■Azure Worker Limitations ■Hybrid Worker Groups ■Hybrid Worker Limitations ■Webhooks

Azure Automation ■Managed service ■Public cloud focus ■Power. Shell ■Highly available

Concepts ■Automation Account ■Runbooks ■Assets ■Jobs ■Workers

Demo

Azure Worker Limitations ■Limited to specifying which Azure region ■Cannot be connected to Azure virtual networks ■No control over IP address ■Limited control over make up of Azure worker

Hybrid Workers ■Runbooks running within your DC ■Uses OMS ■Support script, workflow and graphical runbooks ■No inbound firewall requirements

Demo

Hybrid Worker Groups ■Collections of workers ■Runbooks are executed against groups ■Ideal for providing HA ■Share “run as” permissions

Demo

Hybrid Worker Limitations ■Module Deployment ■Execution context ■No simple file or event triggers ■No prioritization of workers in a group ■Documentation ■Troubleshooting can be a challenge

Webhooks ■Start jobs from HTTPS requests ■Idea for application and 3 rd party integration ■Great for starting jobs if Azure CMDLets are not installed ■Runbooks may need modifications to run from webhooks

Demo

Links ■My site: https: //poshsecurity. com ■Runbooks from this presentation: https: //github. com/poshsecurity/Posh. Security. Azure. Automation ■Hybrid Workers: https: //azure. microsoft. com/enus/documentation/articles/automation-hybrid-runbook-worker/ ■Webhooks: http: //blog. coretech. dk/jgs/azure-automation-usingwebhooks-part-1 -input-data/ ■Azure Automation Authoring Toolkit: https: //www. powershellgallery. com/packages/Azure. Automation. Authori ng. Toolkit

Questions? Kieran Jacobsen • Poshsecurity. com • @kjacobsen Evaluations: http: //aka. ms/melgabpro 6

Thanks!