Modules/Private/1.ExtractionFunctions/Get-ARIAPIResources.ps1
|
<#
.Synopsis Module responsible for retrieving Azure API resources. .DESCRIPTION This module retrieves Azure API resources, including Resource Health, Managed Identities, Advisor Scores, and Policies. .Link https://github.com/microsoft/ARI/Modules/Private/1.ExtractionFunctions/Get-ARIAPIResources.ps1 .COMPONENT This PowerShell Module is part of Azure Resource Inventory (ARI). .NOTES Version: 3.6.0 First Release Date: 15th Oct, 2024 Authors: Claudio Merola #> function Get-ARIAPIResources { Param($Subscriptions, $AzureEnvironment, $SkipPolicy, $Debug ) if ($Debug.IsPresent) { $DebugPreference = 'Continue' $ErrorActionPreference = 'Continue' } else { $ErrorActionPreference = "silentlycontinue" } Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Starting API Inventory') try { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Adquiring Token') $Token = Get-AzAccessToken -AsSecureString -InformationAction SilentlyContinue -WarningAction SilentlyContinue $TokenData = $Token.Token | ConvertFrom-SecureString -AsPlainText $header = @{ 'Authorization' = 'Bearer ' + $TokenData } } catch { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Error: ' + $_.Exception.Message) return } if ($AzureEnvironment -eq 'AzureCloud') { $AzURL = 'management.azure.com' } else { $AzURL = 'management.usgovcloudapi.net' } $ResourceHealthHistoryDate = (Get-Date).AddMonths(-6) $APIResults = @() foreach ($Subscription in $Subscriptions) { $ResourceHealth = "" $Identities = "" $ADVScore = "" $ReservationRecon = "" $PolicyAssign = "" $PolicySetDef = "" $PolicyDef = "" $SubName = $Subscription.Name $Sub = $Subscription.id Write-Host 'Running API Inventory at: ' -NoNewline Write-Host $SubName -ForegroundColor Cyan #ResourceHealth Events Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Getting ResourceHealth Events') $url = ('https://' + $AzURL + '/subscriptions/' + $Sub + '/providers/Microsoft.ResourceHealth/events?api-version=2022-10-01&queryStartTime=' + $ResourceHealthHistoryDate) try { $ResourceHealth = Invoke-RestMethod -Uri $url -Headers $header -Method GET } catch { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Error: ' + $_.Exception.Message) $ResourceHealth = "" } Start-Sleep -Milliseconds 200 #Managed Identities Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Getting Managed Identities') $url = ('https://' + $AzURL + '/subscriptions/' + $Sub + '/providers/Microsoft.ManagedIdentity/userAssignedIdentities?api-version=2023-01-31') try { $Identities = Invoke-RestMethod -Uri $url -Headers $header -Method GET } catch { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Error: ' + $_.Exception.Message) $Identities = "" } Start-Sleep -Milliseconds 200 #Advisor Score Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Getting Advisor Score') $url = ('https://' + $AzURL + '/subscriptions/' + $Sub + '/providers/Microsoft.Advisor/advisorScore?api-version=2023-01-01') try { $ADVScore = Invoke-RestMethod -Uri $url -Headers $header -Method GET } catch { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Error: ' + $_.Exception.Message) $ADVScore = "" } Start-Sleep -Milliseconds 200 #VM Reservation Recomentation Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Getting VM Reservation Recomentation') $url = ('https://' + $AzURL + '/subscriptions/' + $Sub + '/providers/Microsoft.Consumption/reservationRecommendations?api-version=2023-05-01') try { $ReservationRecon = Invoke-RestMethod -Uri $url -Headers $header -Method GET } catch { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Error: ' + $_.Exception.Message) $ReservationRecon = "" } Start-Sleep -Milliseconds 200 if (!$SkipPolicy.isPresent) { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Getting Policies') #Policies try { $url = ('https://'+ $AzURL +'/subscriptions/'+$sub+'/providers/Microsoft.PolicyInsights/policyStates/latest/summarize?api-version=2019-10-01') $PolicyAssign = (Invoke-RestMethod -Uri $url -Headers $header -Method POST).value Start-Sleep -Milliseconds 200 $url = ('https://'+ $AzURL +'/subscriptions/'+$sub+'/providers/Microsoft.Authorization/policySetDefinitions?api-version=2023-04-01') $PolicySetDef = (Invoke-RestMethod -Uri $url -Headers $header -Method GET).value Start-Sleep -Milliseconds 200 $url = ('https://'+ $AzURL +'/subscriptions/'+$sub+'/providers/Microsoft.Authorization/policyDefinitions?api-version=2023-04-01') $PolicyDef = (Invoke-RestMethod -Uri $url -Headers $header -Method GET).value } catch { Write-Debug ((get-date -Format 'yyyy-MM-dd_HH_mm_ss')+' - '+'Error: ' + $_.Exception.Message) $PolicyAssign = "" $PolicySetDef = "" $PolicyDef = "" } } Start-Sleep 1 $tmp = @{ 'Subscription' = $Sub; 'ResourceHealth' = $ResourceHealth.value; 'ManagedIdentities' = $Identities.value; 'AdvisorScore' = $ADVScore.value; 'ReservationRecomen' = $ReservationRecon.value; 'PolicyAssign' = $PolicyAssign; 'PolicyDef' = $PolicyDef; 'PolicySetDef' = $PolicySetDef } $APIResults += $tmp } <# $Body = @{ reportType = "OverallSummaryReport" subscriptionList = @($Subscri) carbonScopeList = @("Scope1") dateRange = @{ start = "2024-06-01" end = "2024-06-30" } } $url = 'https://management.azure.com/providers/Microsoft.Carbon/carbonEmissionReports?api-version=2023-04-01-preview' #$url = 'https://management.azure.com/providers/Microsoft.Carbon/queryCarbonEmissionDataAvailableDateRange?api-version=2023-04-01-preview' $Carbon = Invoke-RestMethod -Uri $url -Headers $header -Body ($Body | ConvertTo-Json) -Method POST -ContentType 'application/json' $Today = Get-Date $EndDate = Get-Date -Year $Today.Year -Month $Today.Month -Day $Today.Day -Hour 23 -Minute 59 -Second 59 -Millisecond 0 $Days = 60 $StartDate = ($EndDate).AddDays(-$Days) $Hash = @{name="PreTaxCost";function="Sum"} $MHash = @{totalCost=$Hash} $Granularity = 'Monthly' $Grouping = @() $GTemp = @{Name='ResourceType';Type='Dimension'} $Grouping += $GTemp $GTemp = @{Name='ResourceGroup';Type='Dimension'} $Grouping += $GTemp $Body = @{ type = "ActualCost" timeframe = "Custom" dataset = @{ granularity = $Granularity aggregation = @($MHash) } grouping = $Grouping timePeriod = @{ startDate = $StartDate endDate = $EndDate } } $url = 'https://management.azure.com/subscriptions/$sub/providers/Microsoft.CostManagement/query?api-version=2019-11-01' $Cost = Invoke-RestMethod -Uri $url -Headers $header -Body ($Body | ConvertTo-Json -Depth 10) -Method POST -ContentType 'application/json' #> return $APIResults } |