Auto-discover Azure VMs, AKS, SQL databases, storage accounts, VNets, NSGs and role assignments across all subscriptions. Health monitoring, CIS compliance, and cost visibility in one dashboard.
CloudVista queries Azure Resource Manager APIs across every subscription and region, building a complete, continuously updated inventory without any agents or manual configuration.
VM size, OS image, power state, availability set/zones, OS and data disks, NICs
Size, SKU, state, encryption type, attached VM, zones
Address space, subnets, DNS servers, DDoS protection, NSG associations
Every inbound/outbound rule — ports, sources, priority, direction
Frontend IPs, backend pools, load-balancing rules, health probes
Address, SKU, allocation method, DNS name, associated resource
Kind, SKU, access tier, public blob access, HTTPS-only, minimum TLS, network default action
SKU/tier, max size, public network access, minimum TLS, state
Kubernetes version, node pools and autoscaling, RBAC, network plugin and policy
State, HTTPS-only, client certificates, host name, outbound IPs
Principal and client IDs, resource group, tags
Role, principal type and scope — who can do what, where
Read-only access via Azure Service Principal — no agents, no resource deployments, no changes to your environment.
In the Azure Portal, go to Microsoft Entra ID › App Registrations › New Registration. Create a client secret. This Service Principal is what CloudVista uses for read-only API access.
Navigate to your Subscription › Access Control (IAM) › Add Role Assignment. Assign the built-in Reader role to the App Registration. For multi-subscription, assign at Management Group level.
Enter the Tenant ID, Subscription ID, Client ID, and Client Secret in CloudVista's Credentials page. CloudVista validates access and immediately begins discovering resources across all resource groups and regions.
Real-time operational health per resource: VMs in failed provisioning state, AKS nodes not ready, SQL servers with replication issues, storage accounts with access errors.
Continuous checks against CIS Microsoft Azure Foundations Benchmark v5.0 — identity, Defender for Cloud, storage security, database auditing, networking, and logging controls.
Monthly spend by subscription, resource group, and service. 12-month cost trend and 3-month forecast. Budget alerts before you breach limits. Stale VM and SQL identification.
Visual topology of virtual networks, subnets, NSGs, VMs, load balancers, and peering connections across subscriptions and regions.
Track every VM resize, NSG rule change, storage account modification, and new resource deployment — with timestamps for incident response and compliance evidence.
See Azure alongside AWS, OCI, GCP, and VMware in one dashboard. Cross-cloud comparison for compliance posture, resource counts, and cost — without switching tools.
Register an Azure App Registration (Service Principal) in Microsoft Entra ID. Assign the Reader role at the subscription or Management Group level. Add the Tenant ID, Client ID, and Client Secret to CloudVista. Discovery begins across all resource groups and regions within minutes.
Yes. Add a Service Principal credential per subscription, or grant the Reader role at Management Group level to discover all subscriptions in your Azure tenant from a single credential.
CloudVista runs CIS Microsoft Azure Foundations Benchmark v5.0 checks. Findings map automatically to SOC 2 Trust Service Criteria and ISO 27001:2022 Annex A controls — with a one-click evidence export for auditors.
Yes — this is CloudVista's core strength. See Azure, AWS, OCI, GCP, and VMware vSphere inventory in a unified dashboard. CloudVista is the only managed platform supporting all five providers natively.
Yes. Azure inventory, health monitoring and compliance checks are available in every CloudVista plan.
CloudVista discovers every Azure VM, SQL database, AKS cluster, and storage account across all your subscriptions. No agents to install.
Contact UsAlso see: Multi-Cloud Inventory · Inventory & Discovery Guide · Plan · Cloud Inventory Management · Multi-Cloud Visibility (blog)