@dougschaefer/azure

v2026.04.27.1

Azure infrastructure management via az CLI — 23 model types covering compute, networking, data, security, identity, monitoring, DNS, DevOps, and subscription-wide topology with Mermaid diagrams and cost estimation.

Repository

https://github.com/dougschaefer6/swamp-azure

Platforms

linux-x86_64 linux-aarch64 darwin-x86_64 darwin-aarch64

Labels

azurecloudnetworkingvmfirewalldnsdevops

models

Quality score

How well-documented and verifiable this extension is.

Grade A

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types1/1earned
Has description1/1earned
At least one platform tag (or universal)1/1earned
Two or more platform tags (or universal)1/1earned
License declared1/1earned
Verified public repository2/2earned

Install

$ swamp extension pull @dougschaefer/azure

Release Notes

Add curated README and LICENSE to tarball (additionalFiles), bringing extension's Swamp Club quality grade from F/B to A-/B.

@dougschaefer/azure-application-gatewayv2026.03.29.1azure/application_gateway.ts

listList all application gateways in a resource group (or subscription).

getGet a single application gateway.

Argument	Type	Required	Description
name	string	yes	Application gateway name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of an application gateway without making changes.

Argument	Type	Required	Description
name	string	yes	Application gateway name
resourceGroup?	string	no	Resource group name

deleteDelete an application gateway.

Argument	Type	Required	Description
name	string	yes	Application gateway name
resourceGroup?	string	no	Resource group name

Resources

appGateway(infinite)— Azure Application Gateway (L7 load balancer)

@dougschaefer/azure-bastionv2026.03.29.1azure/bastion.ts

listList all Bastion hosts in the subscription.

getGet a single Bastion host.

Argument	Type	Required	Description
name	string	yes	Bastion host name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a Bastion host without making changes.

Argument	Type	Required	Description
name	string	yes	Bastion host name
resourceGroup?	string	no	Resource group name

createCreate a Bastion host. Requires a VNet with an AzureBastionSubnet.

Argument	Type	Required	Description
name	string	yes	Bastion host name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region

deleteDelete a Bastion host.

Argument	Type	Required	Description
name	string	yes	Bastion host name
resourceGroup?	string	no	Resource group name

Resources

bastion(infinite)— Azure Bastion host for secure VM access

@dougschaefer/azure-devopsv2026.03.28.1azure/devops.ts

Global Arguments

Argument	Type	Required	Description
organization	string	yes	Azure DevOps organization URL. Use: ${{ vault.get('azure-devops', 'ORG_URL') }}

listProjectsList all projects in the organization.

getProjectGet a single project by name.

Argument	Type	Required	Description
project	string	yes	Project name

listReposList Git repositories in a project.

Argument	Type	Required	Description
project?	string	no	Project name (overrides global)

getRepoGet a single repository by name or ID.

Argument	Type	Required	Description
repository	string	yes	Repository name or ID
project?	string	no	Project name (overrides global)

createRepoCreate a new Git repository.

Argument	Type	Required	Description
name	string	yes	Repository name
project?	string	no	Project name (overrides global)

deleteRepoDelete a Git repository by ID.

Argument	Type	Required	Description
id	string	yes	Repository ID
project?	string	no	Project name (overrides global)

listPipelinesList pipelines in a project.

Argument	Type	Required	Description
project?	string	no	Project name (overrides global)

getPipelineGet a single pipeline by ID.

Argument	Type	Required	Description
id	number	yes	Pipeline ID
project?	string	no	Project name (overrides global)

runPipelineTrigger a pipeline run.

Argument	Type	Required	Description
id	number	yes	Pipeline ID
branch?	string	no	Source branch to build
project?	string	no	Project name (overrides global)

listBuildsList recent pipeline builds.

Argument	Type	Required	Description
top?	number	no	Number of builds to return (default 20)
project?	string	no	Project name (overrides global)

getBuildGet a single build by ID.

Argument	Type	Required	Description
id	number	yes	Build ID
project?	string	no	Project name (overrides global)

listWorkItemsQuery work items using WIQL. Defaults to recent items in the project.

Argument	Type	Required	Description
wiql?	string	no	WIQL query string
project?	string	no	Project name (overrides global)

getWorkItemGet a single work item by ID.

Argument	Type	Required	Description
id	number	yes	Work item ID
project?	string	no	Project name (overrides global)

createWorkItemCreate a new work item.

Argument	Type	Required	Description
title	string	yes	Work item title
type	string	yes	Work item type (e.g. Bug, Task, User Story)
assignedTo?	string	no	Assigned user
areaPath?	string	no	Area path
description?	string	no	Work item description
project?	string	no	Project name (overrides global)

updateWorkItemUpdate a work item by ID with field/value pairs.

Argument	Type	Required	Description
id	number	yes	Work item ID
project?	string	no	Project name (overrides global)

Resources

project(infinite)— Azure DevOps project

repo(infinite)— Azure DevOps Git repository

pipeline(infinite)— Azure DevOps pipeline

build(infinite)— Azure DevOps pipeline build/run

workItem(infinite)— Azure DevOps work item

@dougschaefer/azure-diskv2026.03.29.1azure/disk.ts

listList all managed disks in a resource group (or all in the subscription).

getGet a single managed disk.

Argument	Type	Required	Description
name	string	yes	Disk name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a managed disk without making changes.

Argument	Type	Required	Description
name	string	yes	Disk name
resourceGroup?	string	no	Resource group name

listOrphanedList managed disks that are not attached to any VM (diskState is Unattached).

createCreate a managed disk.

Argument	Type	Required	Description
name	string	yes	Disk name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region
sizeGb	number	yes	Disk size in GB
zone?	string	no	Availability zone (1, 2, or 3)

deleteDelete a managed disk. Disk must be unattached.

Argument	Type	Required	Description
name	string	yes	Disk name
resourceGroup?	string	no	Resource group name

Resources

disk(infinite)— Azure managed disk

@dougschaefer/azure-dnsv2026.03.28.1azure/dns.ts

listZonesList all DNS zones in a resource group (or all in the subscription if no resource group specified).

getZoneGet a single DNS zone.

Argument	Type	Required	Description
name	string	yes	DNS zone name
resourceGroup?	string	no	Resource group name

createZoneCreate a DNS zone.

Argument	Type	Required	Description
name	string	yes	DNS zone name, e.g. example.com
resourceGroup?	string	no	Resource group name

deleteZoneDelete a DNS zone.

Argument	Type	Required	Description
name	string	yes	DNS zone name
resourceGroup?	string	no	Resource group name

syncZoneRefresh stored state for a DNS zone.

Argument	Type	Required	Description
name	string	yes	DNS zone name
resourceGroup?	string	no	Resource group name

listRecordsList all record sets in a DNS zone.

Argument	Type	Required	Description
zoneName	string	yes	DNS zone name
resourceGroup?	string	no	Resource group name

getRecordGet a specific record set from a DNS zone.

Argument	Type	Required	Description
zoneName	string	yes	DNS zone name
name	string	yes	Record set name (e.g. 'www', '@' for apex)
resourceGroup?	string	no	Resource group name

createRecordAdd a record to a record set in a DNS zone. Creates the record set if it does not exist.

Argument	Type	Required	Description
zoneName	string	yes	DNS zone name
name	string	yes	Record set name (e.g. 'www', '@' for apex)
resourceGroup?	string	no	Resource group name

deleteRecordRemove a single record from a record set in a DNS zone.

Argument	Type	Required	Description
zoneName	string	yes	DNS zone name
name	string	yes	Record set name
resourceGroup?	string	no	Resource group name

deleteRecordSetDelete an entire record set from a DNS zone.

Argument	Type	Required	Description
zoneName	string	yes	DNS zone name
name	string	yes	Record set name
resourceGroup?	string	no	Resource group name

exportZoneExport a DNS zone as a zone file. Returns the zone file content as a string.

Argument	Type	Required	Description
zoneName	string	yes	DNS zone name
resourceGroup?	string	no	Resource group name

Resources

zone(infinite)— Azure DNS zone

recordSet(infinite)— DNS record set within a zone

@dougschaefer/azure-firewallv2026.04.02.1azure/firewall.ts

listList all Azure Firewalls in a resource group (or all in the subscription).

getGet a single Azure Firewall.

Argument	Type	Required	Description
name	string	yes	Firewall name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of an Azure Firewall without making changes.

Argument	Type	Required	Description
name	string	yes	Firewall name
resourceGroup?	string	no	Resource group name

createCreate an Azure Firewall. Requires a VNet with an AzureFirewallSubnet.

Argument	Type	Required	Description
name	string	yes	Firewall name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region
vnetName	string	yes	VNet name (must have AzureFirewallSubnet)

deleteDelete an Azure Firewall.

Argument	Type	Required	Description
name	string	yes	Firewall name
resourceGroup?	string	no	Resource group name

listPoliciesList all firewall policies in a resource group.

getPolicyGet a single firewall policy.

Argument	Type	Required	Description
name	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name

syncPolicyRefresh the stored state of a firewall policy without making changes.

Argument	Type	Required	Description
name	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name

listRuleCollectionGroupsList all rule collection groups in a firewall policy.

Argument	Type	Required	Description
policyName	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name

getRuleCollectionGroupGet a single rule collection group from a firewall policy.

Argument	Type	Required	Description
name	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name

createRuleCollectionGroupCreate a rule collection group in a firewall policy.

Argument	Type	Required	Description
name	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name
priority	number	yes	Priority (100-65000, lower = higher priority)

deleteRuleCollectionGroupDelete a rule collection group from a firewall policy.

Argument	Type	Required	Description
name	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name

addFilterCollectionAdd a filter rule collection (network or application rules) to an existing rule collection group.

Argument	Type	Required	Description
rcgName	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name
collectionName	string	yes	New rule collection name
collectionPriority	number	yes	Collection priority (100-65000)
actionType	enum	yes	Filter action

addNatCollectionAdd a NAT (DNAT) rule collection to an existing rule collection group.

Argument	Type	Required	Description
rcgName	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
resourceGroup?	string	no	Resource group name
collectionName	string	yes	New NAT collection name
collectionPriority	number	yes	Collection priority (100-65000)
ruleName	string	yes	First DNAT rule name
sourceAddresses	array	yes	Source IP(s) or * for any
destinationAddresses	array	yes	Firewall public IP(s) to match
destinationPorts	array	yes	External port(s) to match
translatedAddress	string	yes	Internal IP to forward to
translatedPort	string	yes	Internal port to forward to
ipProtocols	array	yes	Protocols

addRuleAdd a rule to an existing rule collection. Supports NatRule, NetworkRule, and ApplicationRule types.

Argument	Type	Required	Description
rcgName	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
collectionName	string	yes	Existing rule collection name
resourceGroup?	string	no	Resource group name
ruleType	enum	yes	Rule type
ruleName	string	yes	Rule name
sourceAddresses	array	yes	Source IP(s), CIDR(s), or * for any
destinationAddresses?	array	no	Destination IP(s) or CIDR(s)
destinationPorts?	array	no	Destination port(s)
ipProtocols?	array	no	Protocols: TCP, UDP, Any, ICMP
translatedAddress?	string	no	DNAT translated internal IP (NatRule only)
translatedPort?	string	no	DNAT translated internal port (NatRule only)
targetFqdns?	array	no	Target FQDNs (ApplicationRule only)
protocols?	array	no	App protocols, e.g. Http=80 Https=443 (ApplicationRule only)
description?	string	no	Rule description

removeRuleRemove a rule from a rule collection.

Argument	Type	Required	Description
rcgName	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
collectionName	string	yes	Rule collection name
ruleName	string	yes	Rule name to remove
resourceGroup?	string	no	Resource group name

removeCollectionRemove an entire rule collection from a rule collection group.

Argument	Type	Required	Description
rcgName	string	yes	Rule collection group name
policyName	string	yes	Firewall policy name
collectionName	string	yes	Rule collection name to remove
resourceGroup?	string	no	Resource group name

createPolicyCreate a firewall policy.

Argument	Type	Required	Description
name	string	yes	Policy name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region

Resources

firewall(infinite)— Azure Firewall instance

policy(infinite)— Azure Firewall policy

ruleCollectionGroup(infinite)— Firewall policy rule collection group

@dougschaefer/azure-key-vaultv2026.03.29.1azure/key_vault.ts

listList all Key Vaults in a resource group (or all in the subscription).

getGet a single Key Vault.

Argument	Type	Required	Description
name	string	yes	Key Vault name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a Key Vault without making changes.

Argument	Type	Required	Description
name	string	yes	Key Vault name
resourceGroup?	string	no	Resource group name

createCreate a Key Vault.

Argument	Type	Required	Description
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a Key Vault. If soft delete is enabled, the vault enters a deleted state and can be recovered.

Argument	Type	Required	Description
name	string	yes	Key Vault name
resourceGroup?	string	no	Resource group name

Resources

keyVault(infinite)— Azure Key Vault

@dougschaefer/azure-load-balancerv2026.03.29.1azure/load_balancer.ts

listList all load balancers in a resource group (or all in the subscription).

getGet a single load balancer with full configuration.

Argument	Type	Required	Description
name	string	yes	Load balancer name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a load balancer without making changes.

Argument	Type	Required	Description
name	string	yes	Load balancer name
resourceGroup?	string	no	Resource group name

createCreate a load balancer.

Argument	Type	Required	Description
name	string	yes	Load balancer name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region

deleteDelete a load balancer.

Argument	Type	Required	Description
name	string	yes	Load balancer name
resourceGroup?	string	no	Resource group name

listBackendPoolsList backend address pools on a load balancer.

Argument	Type	Required	Description
lbName	string	yes	Load balancer name
resourceGroup?	string	no	Resource group name

listProbesList health probes on a load balancer.

Argument	Type	Required	Description
lbName	string	yes	Load balancer name
resourceGroup?	string	no	Resource group name

Resources

loadBalancer(infinite)— Azure Load Balancer (L4)

backendPool(infinite)— Backend address pool

probe(infinite)— Health probe

@dougschaefer/azure-managed-identityv2026.03.29.1azure/managed_identity.ts

listList all user-assigned managed identities in a resource group (or subscription).

getGet a single user-assigned managed identity.

Argument	Type	Required	Description
name	string	yes	Identity name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a managed identity without making changes.

Argument	Type	Required	Description
name	string	yes	Identity name
resourceGroup?	string	no	Resource group name

createCreate a user-assigned managed identity.

Argument	Type	Required	Description
name	string	yes	Identity name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region

deleteDelete a user-assigned managed identity.

Argument	Type	Required	Description
name	string	yes	Identity name
resourceGroup?	string	no	Resource group name

Resources

identity(infinite)— Azure user-assigned managed identity

@dougschaefer/azure-monitorv2026.03.29.1azure/monitor.ts

listMetricAlertsList all metric alert rules in a resource group (or subscription).

listActivityLogAlertsList all activity log alerts in the subscription.

listActionGroupsList all action groups in a resource group (or subscription).

getDiagnosticSettingsList diagnostic settings for a specific Azure resource.

Resources

metricAlert(infinite)— Azure Monitor metric alert rule

activityLogAlert(infinite)— Azure Monitor activity log alert

diagnosticSetting(infinite)— Diagnostic setting on an Azure resource

actionGroup(infinite)— Azure Monitor action group

@dougschaefer/azure-nat-gatewayv2026.03.29.1azure/nat_gateway.ts

listList all NAT gateways in a resource group (or all in the subscription).

getGet a single NAT gateway.

Argument	Type	Required	Description
name	string	yes	NAT gateway name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a NAT gateway without making changes.

Argument	Type	Required	Description
name	string	yes	NAT gateway name
resourceGroup?	string	no	Resource group name

createCreate a NAT gateway.

Argument	Type	Required	Description
name	string	yes	NAT gateway name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a NAT gateway.

Argument	Type	Required	Description
name	string	yes	NAT gateway name
resourceGroup?	string	no	Resource group name

Resources

natGateway(infinite)— Azure NAT gateway

@dougschaefer/azure-network-watcherv2026.03.29.1azure/network_watcher.ts

listList all Network Watcher instances in the subscription.

listFlowLogsList all NSG flow logs for a Network Watcher.

Argument	Type	Required	Description
watcherName	string	yes	Network Watcher name

listConnectionMonitorsList all connection monitors for a Network Watcher.

Argument	Type	Required	Description
watcherName	string	yes	Network Watcher name

checkConnectivityTest connectivity from a source VM to a destination endpoint.

Argument	Type	Required	Description
sourceVmId	string	yes	Source VM resource ID
destPort	number	yes	Destination port

Resources

watcher(infinite)— Azure Network Watcher instance

flowLog(infinite)— NSG flow log configuration

connectionMonitor(infinite)— Connection monitor test

@dougschaefer/azure-nsgv2026.03.28.1azure/nsg.ts

listList all NSGs in a resource group (or all in the subscription if no resource group specified).

getGet a single NSG with all its rules.

Argument	Type	Required	Description
name	string	yes	NSG name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of an NSG and its rules without making changes.

Argument	Type	Required	Description
name	string	yes	NSG name
resourceGroup?	string	no	Resource group name

createCreate a network security group.

Argument	Type	Required	Description
name	string	yes	NSG name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a network security group.

Argument	Type	Required	Description
name	string	yes	NSG name
resourceGroup?	string	no	Resource group name

listRulesList all custom rules in an NSG.

Argument	Type	Required	Description
nsgName	string	yes	NSG name
resourceGroup?	string	no	Resource group name

getRuleGet a single NSG rule.

Argument	Type	Required	Description
nsgName	string	yes	NSG name
ruleName	string	yes	Rule name
resourceGroup?	string	no	Resource group name

createRuleCreate a security rule in an NSG.

Argument	Type	Required	Description
nsgName	string	yes	NSG name
ruleName	string	yes	Rule name
access	enum	yes	Allow or deny traffic
resourceGroup?	string	no	Resource group name

updateRuleUpdate an existing security rule. Only specified fields are changed.

Argument	Type	Required	Description
nsgName	string	yes	NSG name
ruleName	string	yes	Rule name
resourceGroup?	string	no	Resource group name
priority?	number	no	New priority
access?	enum	no	New access
protocol?	string	no	New protocol
description?	string	no	New description

deleteRuleDelete a security rule from an NSG.

Argument	Type	Required	Description
nsgName	string	yes	NSG name
ruleName	string	yes	Rule name
resourceGroup?	string	no	Resource group name

Resources

nsg(infinite)— Azure network security group

rule(infinite)— Individual security rule within an NSG

@dougschaefer/azure-private-endpointv2026.03.29.1azure/private_endpoint.ts

listList all private endpoints in a resource group (or all in the subscription).

getGet a single private endpoint.

Argument	Type	Required	Description
name	string	yes	Private endpoint name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a private endpoint without making changes.

Argument	Type	Required	Description
name	string	yes	Private endpoint name
resourceGroup?	string	no	Resource group name

createCreate a private endpoint for a Private Link-enabled service.

Argument	Type	Required	Description
name	string	yes	Private endpoint name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region
vnetName	string	yes	VNet containing the subnet
subnetName	string	yes	Subnet for the private endpoint NIC

deleteDelete a private endpoint.

Argument	Type	Required	Description
name	string	yes	Private endpoint name
resourceGroup?	string	no	Resource group name

listPrivateDnsZonesList all private DNS zones in a resource group.

Resources

privateEndpoint(infinite)— Azure Private Endpoint for Private Link connections

privateDnsZone(infinite)— Private DNS zone for private endpoint resolution

@dougschaefer/azure-public-ipv2026.03.28.1azure/public_ip.ts

listList all public IP addresses in a resource group (or all in the subscription).

getGet a single public IP address.

Argument	Type	Required	Description
name	string	yes	Public IP name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a public IP address without making changes.

Argument	Type	Required	Description
name	string	yes	Public IP name
resourceGroup?	string	no	Resource group name

createCreate a public IP address.

Argument	Type	Required	Description
name	string	yes	Public IP name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a public IP address.

Argument	Type	Required	Description
name	string	yes	Public IP name
resourceGroup?	string	no	Resource group name

Resources

publicIp(infinite)— Azure public IP address

@dougschaefer/azure-resource-groupv2026.03.05.1azure/resource_group.ts

listList all resource groups in the subscription. Produces one resource instance per group.

getGet a single resource group by name.

Argument	Type	Required	Description
name	string	yes	Resource group name

createCreate a resource group.

Argument	Type	Required	Description
name	string	yes	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a resource group and all its resources.

Argument	Type	Required	Description
name	string	yes	Resource group name to delete

Resources

resourceGroup(infinite)— Azure resource group

@dougschaefer/azure-route-tablev2026.03.29.1azure/route_table.ts

listList all route tables in a resource group (or all in the subscription).

getGet a single route table with all its routes.

Argument	Type	Required	Description
name	string	yes	Route table name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a route table without making changes.

Argument	Type	Required	Description
name	string	yes	Route table name
resourceGroup?	string	no	Resource group name

createCreate a route table.

Argument	Type	Required	Description
name	string	yes	Route table name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a route table.

Argument	Type	Required	Description
name	string	yes	Route table name
resourceGroup?	string	no	Resource group name

listRoutesList all routes in a route table.

Argument	Type	Required	Description
routeTableName	string	yes	Route table name
resourceGroup?	string	no	Resource group name

createRouteCreate a route in a route table.

Argument	Type	Required	Description
routeTableName	string	yes	Route table name
routeName	string	yes	Route name
resourceGroup?	string	no	Resource group name

updateRouteUpdate an existing route in a route table.

Argument	Type	Required	Description
routeTableName	string	yes	Route table name
routeName	string	yes	Route name
resourceGroup?	string	no	Resource group name

deleteRouteDelete a route from a route table.

Argument	Type	Required	Description
routeTableName	string	yes	Route table name
routeName	string	yes	Route name
resourceGroup?	string	no	Resource group name

Resources

routeTable(infinite)— Azure route table

route(infinite)— Individual route within a route table

@dougschaefer/azure-sqlv2026.03.28.1azure/sql.ts

listServersList all SQL servers in a resource group (or all in the subscription).

getServerGet a single SQL server.

Argument	Type	Required	Description
name	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

syncServerRefresh the stored state of a SQL server without making changes.

Argument	Type	Required	Description
name	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

syncDatabaseRefresh the stored state of a database without making changes.

Argument	Type	Required	Description
name	string	yes	Database name
serverName	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

createServerCreate an Azure SQL logical server.

Argument	Type	Required	Description
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2
adminUser	string	yes	Server admin username

deleteServerDelete an Azure SQL logical server and all its databases.

Argument	Type	Required	Description
name	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

listDatabasesList all databases on a SQL server.

Argument	Type	Required	Description
serverName	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

getDatabaseGet a single database on a SQL server.

Argument	Type	Required	Description
name	string	yes	Database name
serverName	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

createDatabaseCreate a database on a SQL server.

Argument	Type	Required	Description
name	string	yes	Database name
serverName	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

deleteDatabaseDelete a database from a SQL server.

Argument	Type	Required	Description
name	string	yes	Database name
serverName	string	yes	SQL server name
resourceGroup?	string	no	Resource group name

Resources

server(infinite)— Azure SQL logical server

database(infinite)— Azure SQL database

@dougschaefer/azure-storage-accountv2026.03.28.1azure/storage_account.ts

listList all storage accounts in a resource group (or all in the subscription).

getGet a single storage account.

Argument	Type	Required	Description
name	string	yes	Storage account name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a storage account without making changes.

Argument	Type	Required	Description
name	string	yes	Storage account name
resourceGroup?	string	no	Resource group name

createCreate a storage account.

Argument	Type	Required	Description
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a storage account.

Argument	Type	Required	Description
name	string	yes	Storage account name
resourceGroup?	string	no	Resource group name

Resources

storageAccount(infinite)— Azure storage account

@dougschaefer/azure-topologyv2026.03.29.1azure/topology.ts

inventoryDiscover all resources across the subscription (or a single resource group). Produces per-resource data handles for VMs, disks, VNets, NSGs, firewalls, public IPs, NAT gateways, route tables, load balancers, application gateways, Bastion, Key Vaults, storage accounts, private endpoints, managed identities, and SQL servers.

generateGenerate a Mermaid topology diagram. When resourceGroup is provided, diagrams a single RG. When omitted, produces a subscription-wide hub-and-spoke diagram across all resource groups with LR layout, traffic flow arrows, and Azure-branded colors.

costEstimateEstimate monthly costs for VMs in a resource group using the Azure Retail Pricing API (public, no auth required).

Argument	Type	Required	Description
resourceGroup?	string	no	Resource group name

exportTemplateExport an ARM template for all resources in a resource group.

Argument	Type	Required	Description
resourceGroup?	string	no	Resource group name

Resources

topology(infinite)— Mermaid topology diagram for an Azure resource group

costEstimate(infinite)— Cost estimate for resources in a resource group

armTemplate(infinite)— Exported ARM template for a resource group

inventoryItem(infinite)— Individual Azure resource discovered during subscription inventory

@dougschaefer/azure-vmv2026.03.28.1azure/vm.ts

listList VMs in a resource group (or all in the subscription if no resource group specified). Includes power state.

getGet a single VM with instance details.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a VM without making changes. Useful for drift detection and monitoring.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

getInstanceViewGet the instance view of a VM — power state, agent status, disk status.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

createCreate a virtual machine. Creates NIC, public IP, and OS disk automatically unless specified.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2
adminUsername	string	yes	Admin username
vnetName?	string	no	Existing VNet name
subnetName?	string	no	Existing subnet name
osDiskSizeGb?	number	no	OS disk size in GB

deleteDelete a virtual machine. Note: associated NIC, OS disk, and public IP are NOT automatically deleted — clean up separately.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

startStart a stopped/deallocated VM.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

stopPower off a VM without deallocating (still incurs compute charges).

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

deallocateDeallocate a VM (releases compute resources, stops charges).

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

restartRestart a running VM.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

resizeResize a VM to a different size. VM must be deallocated first for some size changes.

Argument	Type	Required	Description
name	string	yes	VM name
size	string	yes	New VM size, e.g. Standard_D4s_v5
resourceGroup?	string	no	Resource group name

listSizesList available VM sizes in a location.

Argument	Type	Required	Description
location	string	yes	Azure region, e.g. eastus2

runCommandRun a shell command on a VM via the Azure VM Run Command extension.

Argument	Type	Required	Description
name	string	yes	VM name
resourceGroup?	string	no	Resource group name

Resources

vm(infinite)— Azure virtual machine

instanceView(infinite)— VM instance view with power state and agent status

@dougschaefer/azure-vnetv2026.03.28.1azure/vnet.ts

listList all VNets in a resource group (or all in the subscription if no resource group specified).

getGet a single VNet by name.

Argument	Type	Required	Description
name	string	yes	VNet name
resourceGroup?	string	no	Resource group name

syncRefresh the stored state of a VNet and its subnets without making changes.

Argument	Type	Required	Description
name	string	yes	VNet name
resourceGroup?	string	no	Resource group name

createCreate a virtual network.

Argument	Type	Required	Description
name	string	yes	VNet name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region, e.g. eastus2

deleteDelete a virtual network.

Argument	Type	Required	Description
name	string	yes	VNet name
resourceGroup?	string	no	Resource group name

listSubnetsList all subnets in a VNet.

Argument	Type	Required	Description
vnetName	string	yes	VNet name
resourceGroup?	string	no	Resource group name

getSubnetGet a single subnet.

Argument	Type	Required	Description
vnetName	string	yes	VNet name
subnetName	string	yes	Subnet name
resourceGroup?	string	no	Resource group name

createSubnetCreate a subnet in a VNet.

Argument	Type	Required	Description
vnetName	string	yes	VNet name
subnetName	string	yes	Subnet name
resourceGroup?	string	no	Resource group name

updateSubnetUpdate a subnet — attach or detach NSG or route table.

Argument	Type	Required	Description
vnetName	string	yes	VNet name
subnetName	string	yes	Subnet name
resourceGroup?	string	no	Resource group name

deleteSubnetDelete a subnet from a VNet.

Argument	Type	Required	Description
vnetName	string	yes	VNet name
subnetName	string	yes	Subnet name
resourceGroup?	string	no	Resource group name

listPeeringsList all peering connections for a VNet.

Argument	Type	Required	Description
vnetName	string	yes	VNet name
resourceGroup?	string	no	Resource group name

createPeeringCreate a VNet peering connection. Creates one direction only — you need to create the reverse peering on the remote VNet separately.

Argument	Type	Required	Description
vnetName	string	yes	Local VNet name
peeringName	string	yes	Peering connection name
resourceGroup?	string	no	Resource group name

deletePeeringDelete a VNet peering connection.

Argument	Type	Required	Description
vnetName	string	yes	VNet name
peeringName	string	yes	Peering connection name
resourceGroup?	string	no	Resource group name

Resources

vnet(infinite)— Azure virtual network

subnet(infinite)— Azure subnet within a virtual network

peering(infinite)— Virtual network peering connection

@dougschaefer/azure-vwanv2026.03.05.1azure/vwan.ts

listList all Virtual WANs in a resource group (or subscription).

getGet a single Virtual WAN.

Argument	Type	Required	Description
name	string	yes	vWAN name
resourceGroup?	string	no	Resource group name

createCreate a Virtual WAN.

Argument	Type	Required	Description
name	string	yes	vWAN name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region

deleteDelete a Virtual WAN.

Argument	Type	Required	Description
name	string	yes	vWAN name
resourceGroup?	string	no	Resource group name

listHubsList all virtual hubs in a resource group (or subscription).

getHubGet a single virtual hub.

Argument	Type	Required	Description
name	string	yes	Virtual hub name
resourceGroup?	string	no	Resource group name

createHubCreate a virtual hub within a vWAN.

Argument	Type	Required	Description
name	string	yes	Virtual hub name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region
vwanName	string	yes	Parent vWAN name

deleteHubDelete a virtual hub.

Argument	Type	Required	Description
name	string	yes	Virtual hub name
resourceGroup?	string	no	Resource group name

listHubConnectionsList all VNet connections to a virtual hub.

Argument	Type	Required	Description
hubName	string	yes	Virtual hub name
resourceGroup?	string	no	Resource group name

createHubConnectionConnect a VNet to a virtual hub.

Argument	Type	Required	Description
name	string	yes	Connection name
hubName	string	yes	Virtual hub name
resourceGroup?	string	no	Resource group name

deleteHubConnectionRemove a VNet connection from a virtual hub.

Argument	Type	Required	Description
name	string	yes	Connection name
hubName	string	yes	Virtual hub name
resourceGroup?	string	no	Resource group name

listVpnSitesList all VPN sites in a resource group (or subscription).

getVpnSiteGet a single VPN site.

Argument	Type	Required	Description
name	string	yes	VPN site name
resourceGroup?	string	no	Resource group name

createVpnSiteCreate a VPN site (branch office) configuration.

Argument	Type	Required	Description
name	string	yes	VPN site name
resourceGroup?	string	no	Resource group name
location	string	yes	Azure region
vwanName	string	yes	Associated vWAN name
deviceModel?	string	no	VPN device model

deleteVpnSiteDelete a VPN site.

Argument	Type	Required	Description
name	string	yes	VPN site name
resourceGroup?	string	no	Resource group name

listVpnGatewaysList all site-to-site VPN gateways in a resource group (or subscription).

getVpnGatewayGet a single VPN gateway.

Argument	Type	Required	Description
name	string	yes	VPN gateway name
resourceGroup?	string	no	Resource group name

inventoryInventory the complete vWAN topology — vWAN, hubs, hub connections, VPN sites, and VPN gateways in a resource group.

Argument	Type	Required	Description
resourceGroup?	string	no	Resource group name

Resources

vwan(infinite)— Azure Virtual WAN

virtualHub(infinite)— Virtual hub within a vWAN

hubConnection(infinite)— VNet connection to a virtual hub

vpnSite(infinite)— VPN site (branch office) configuration

vpnGateway(infinite)— Site-to-site VPN gateway in a virtual hub

2026.04.13.171.7 KBApr 13, 2026

Release Notes

Add .meta({ sensitive: true }) to VM adminPassword and sshKeyValue fields

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewalldnsdevops

2026.04.02.171.7 KBApr 2, 2026

Release Notes

Add firewall policy rule management: createRuleCollectionGroup, deleteRuleCollectionGroup, addFilterCollection, addNatCollection, addRule, removeRule, removeCollection

Changelog

Models

~azure-firewallmethods: +createRuleCollectionGroup, +deleteRuleCollectionGroup, +addFilterCollection, +addNatCollection, +addRule, +removeRule, +removeCollection

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewalldnsdevops

2026.03.30.167.8 KBMar 30, 2026

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewalldnsdevops

2026.03.29.462.1 KBMar 29, 2026

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewalldnsdevops

2026.03.29.145.0 KBMar 29, 2026

Azure infrastructure management via az CLI — VMs, VNets, NSGs, firewalls, route tables, NAT gateways, public IPs, Key Vault, SQL, storage accounts, vWAN, DNS zones, Azure DevOps, and topology visualization. Includes sync methods and readiness polling.

Release Notes

Pin zod to 4.3.6

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewalldnsdevops

2026.03.28.145.0 KBMar 28, 2026

Release Notes

New models: azure-dns (zones, record sets, zone export) and azure-devops (projects, repos, pipelines, builds, work items). Sync methods added to 8 models for drift detection. Readiness polling on VM create and start. 15 models, 131 methods.

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewalldnsdevops

2026.03.27.335.6 KBMar 28, 2026

Azure infrastructure management via az CLI — VMs, VNets, NSGs, firewalls, route tables, NAT gateways, public IPs, Key Vault, SQL, storage accounts, vWAN, and topology visualization. Multi-tenant with vault-based credential resolution.

Release Notes

Fix repository URL: point to GitHub instead of ADO.

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewallmsp

2026.03.27.135.6 KBMar 28, 2026

Release Notes

Bug fixes: 8 missing --yes flags on delete methods, SQL maxSize format fix, VM delete orphan warning, runCommand output capture. New methods: updateSubnet, getDatabase, updateRoute.

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudnetworkingvmfirewallmsp

2026.03.05.234.8 KBMar 5, 2026

Azure infrastructure management — resource groups, networking (VNets, subnets, peering, NSGs, route tables, public IPs, NAT gateways, Azure Firewall, vWAN with virtual hubs and VPN), compute (VMs with full lifecycle), data (Azure SQL, storage accounts), security (Key Vault), and topology visualization (Mermaid diagrams). All operations via Azure CLI.

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudinfrastructurenetworkingcomputesecuritydatabasestorage

2026.03.05.130.2 KBMar 5, 2026

Azure infrastructure management — resource groups, networking (VNets, subnets, peering, NSGs, route tables, public IPs, NAT gateways, Azure Firewall), compute (VMs with full lifecycle), data (Azure SQL, storage accounts), security (Key Vault), and topology visualization (Mermaid diagrams). All operations via Azure CLI.

linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64

azurecloudinfrastructurenetworkingcomputesecuritydatabasestorage

@dougschaefer/azure

Repository

Platforms

Labels

Contents

Quality score

Install

Release Notes

Models23

Resources

Resources

Global Arguments

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Resources

Previous Versions10

Release Notes

Release Notes

Changelog

Models

Release Notes

Release Notes

Release Notes

Release Notes