AzureScout

3.8.2

AzureScout — discover, inventory, and assess everything in your Azure environment from one command. Run Invoke-AzureScout with no parameters for a guided wizard, or drive it with switches: by default it inventories Azure resources, Entra ID, and identity objects (Excel, JSON, Markdown, AsciiDoc); add -Assessment and it runs a read-only CAF/WAF landing-zone assessment,
AzureScout — discover, inventory, and assess everything in your Azure environment from one command. Run Invoke-AzureScout with no parameters for a guided wizard, or drive it with switches: by default it inventories Azure resources, Entra ID, and identity objects (Excel, JSON, Markdown, AsciiDoc); add -Assessment and it runs a read-only CAF/WAF landing-zone assessment, scoring the tenant against Cloud Adoption Framework design areas and Well-Architected pillars and producing Power BI, self-contained HTML, executive PowerPoint, and JSON/Excel evidence. See everything. Own your cloud. (Requires PowerShell 7 on PowerShell Core.)
Show more

Minimum PowerShell version

7.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name AzureScout -RequiredVersion 3.8.2

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name AzureScout -Version 3.8.2

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2026 Hybrid Cloud Solutions. All rights reserved.

Package Details

Author(s)

  • Kristopher Turner

Tags

Azure AzureScout Discovery Inventory Assessment CAF WAF WellArchitected CloudAdoptionFramework LandingZone Governance AZSC EntraID Resources ARM Graph Reporting Excel PowerBI

Functions

Start-AZSCAdvisoryJob Start-AZSCPolicyJob Start-AZSCSecCenterJob Start-AZSCSubscriptionJob Wait-AZSCJob Build-AZSCDiagramSubnet Set-AZSCDiagramFile Start-AZSCDiagramJob Start-AZSCDiagramNetwork Start-AZSCDiagramOrganization Start-AZSCDiagramSubscription Start-AZSCDrawIODiagram Invoke-AzureScout Test-AZSCPermissions Start-AZSCWizard Test-ScoutPermission Invoke-ScoutPipeline Get-ScoutInventoryDrift Get-ScoutCostAnomaly Get-ScoutIacGap Import-ScoutConfig Export-ScoutConfig

PSEditions

Core

Dependencies

This module has no dependencies.

Release Notes

v3.8.2 - PIM assignments actually collect. The Entra extraction skipped PIM Assignments with 400 Bad Request on every run: Graph v1.0 allows one navigation property per expand on directory role assignments and the query used two with nested selects. Single-expand fix, live-verified against a real tenant (200 with real assignments where the old query failed), plus a summary de-duplication in the permission audit. v3.8.1 - The check that failed a god account. The per-subscription ARM pre-flight matched the role name 'Reader' literally, failing accounts holding Owner or Contributor - strict supersets of Reader's */read - and telling them to grant a role they did not need. The check now accepts the built-in supersets by name and custom roles by their definition's Actions, and shows which role satisfied the ask. v3.8.0 - One taxonomy, no broken scripts. The 12 legacy assessment registry keys join the source-anchored naming: LandingZone becomes 'CAF: Azure Landing Zone'; CASA, DevOps Capability Assessment, SMART and FinOps Review become 'Microsoft: *'; Cost, CrossResource, Monitoring, UpdateManager and Governance become 'Scout: *'; the AVS pair becomes 'Workload: *'. Every old name keeps working through an alias map with a one-time deprecation warning - '-Assessment LandingZone' still runs the same assessment - pinned by a dedicated backward-compatibility test suite. Wizard defaults, internal defaults and the documentation move to the new names. See CHANGELOG.md for the full history.

FileList

Version History

Version Downloads Last updated
3.12.3 8 8/12/2026
3.12.2 8 8/12/2026
3.12.1 8 8/11/2026
3.12.0 8 8/11/2026
3.11.0 6 8/11/2026
3.10.2 7 8/10/2026
3.10.1 7 8/10/2026
3.10.0 7 8/10/2026
3.9.0 6 8/9/2026
3.8.4 6 8/9/2026
3.8.3 6 8/9/2026
3.8.2 (current version) 5 8/9/2026
3.8.1 7 8/9/2026
3.8.0 6 8/8/2026
3.7.0 7 8/8/2026
3.6.1 6 8/8/2026
3.6.0 8 8/8/2026
3.5.1 11 8/4/2026
3.5.0 7 8/4/2026
3.3.4 7 8/4/2026
3.3.3 8 8/3/2026
3.3.2 5 8/3/2026
3.3.1 7 8/3/2026
3.3.0 6 8/3/2026
3.1.0 10 7/31/2026
3.0.9 8 7/31/2026
3.0.8 5 7/30/2026
3.0.7 4 7/30/2026
3.0.6 8 7/30/2026
3.0.5 9 7/29/2026
3.0.4 5 7/29/2026
3.0.3 4 7/29/2026
3.0.2 8 7/29/2026
3.0.1 5 7/29/2026
3.0.0 10 7/28/2026
2.11.0 10 7/26/2026
2.10.0 6 7/26/2026
2.9.0 10 7/26/2026
2.8.0 6 7/26/2026
2.7.0 8 7/26/2026
2.6.0 6 7/26/2026
2.5.3 5 7/25/2026
2.5.2 9 7/25/2026
2.5.1 5 7/25/2026
2.5.0 6 7/25/2026
2.4.0 5 7/25/2026
2.3.0 7 7/25/2026
2.2.0 5 7/24/2026
2.1.0 6 7/24/2026
2.0.1 7 7/23/2026
2.0.0 5 7/23/2026
1.0.0 48 2/25/2026
Show less