1
00:00:00,940 --> 00:00:05,840
[Autogenerated] now, let's discuss Azure VM extensions and log analytics.

2
00:00:05,840 --> 00:00:09,000
Azure VM extensions are small applications that

3
00:00:09,000 --> 00:00:11,420
provide post deployment automation.

4
00:00:11,420 --> 00:00:16,470
The extension is the main way to service your Azure managed machines.

5
00:00:16,470 --> 00:00:20,820
You'll find that the VM extensions that are available in Azure developed

6
00:00:20,820 --> 00:00:24,430
both by Microsoft as well as select third party partners.

7
00:00:24,430 --> 00:00:28,860
The main user or administrator extension is called custom

8
00:00:28,860 --> 00:00:31,430
script extension and I use this all the time.

9
00:00:31,430 --> 00:00:34,580
This is where you can deliver a power shell script into your

10
00:00:34,580 --> 00:00:38,760
Windows server VMS have it run under system context.

11
00:00:38,760 --> 00:00:40,480
Just run once and terminate.

12
00:00:40,480 --> 00:00:44,880
Excellent way to provide post deployment configuration,

13
00:00:44,880 --> 00:00:48,240
anything you need to do from a configuration management

14
00:00:48,240 --> 00:00:50,450
or fix up or whatever it might be.

15
00:00:50,450 --> 00:00:53,200
Custom script is a good swiss army knife for that.

16
00:00:53,200 --> 00:00:56,050
Now in order to use Azure VM extensions,

17
00:00:56,050 --> 00:00:59,970
the machine is going to have to have the Azure VM agent installed.

18
00:00:59,970 --> 00:01:04,000
This would apply to your Azure VMS or it would need to be on boarded

19
00:01:04,000 --> 00:01:07,650
to Azure Arc for servers if it's an off cloud VM.

20
00:01:07,650 --> 00:01:10,340
Now, as far as how you deploy those extensions,

21
00:01:10,340 --> 00:01:13,540
you can do it right in the Azure portal but I prefer to,

22
00:01:13,540 --> 00:01:17,870
especially for Azure VMS that I'm deploying to include the extension

23
00:01:17,870 --> 00:01:22,330
definition right in my arm or bicep deployment template.

24
00:01:22,330 --> 00:01:26,440
Some representative Azure VM extensions are Microsoft.

25
00:01:26,440 --> 00:01:31,690
Anti malware client third-party anti malware clients configuration management.

26
00:01:31,690 --> 00:01:35,490
A lot of the leaders in that field have VM extensions

27
00:01:35,490 --> 00:01:38,950
Already an Azure chef puppet octopus deploy.

28
00:01:38,950 --> 00:01:42,920
There's dsc or PowerShell desired state configuration available to

29
00:01:42,920 --> 00:01:46,850
you as your backup requires an extension I mentioned the custom

30
00:01:46,850 --> 00:01:50,180
script extension as your network and hybrid cloud network

31
00:01:50,180 --> 00:01:51,800
monitoring requires the network.

32
00:01:51,800 --> 00:01:52,750
Watch your extension.

33
00:01:52,750 --> 00:01:58,000
There's qualities for third-party vulnerability scanning. There's quite a bit there.