Skip to content

Commit

Permalink
Create ALZ-Resource-Provider-Recommendations (#1539)
Browse files Browse the repository at this point in the history
Co-authored-by: Jack Tracey <[email protected]>
  • Loading branch information
alisakina99 and jtracey93 authored Feb 1, 2024
1 parent a80bb9f commit d128e8b
Show file tree
Hide file tree
Showing 3 changed files with 54 additions and 0 deletions.
52 changes: 52 additions & 0 deletions docs/wiki/ALZ-Resource-Provider-Recommendations.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@

# ALZ Azure Resource Provider Recommendations


## What are Resource Providers in Azure?

An Azure resource provider is a set of REST operations that enable functionality for a specific Azure service. For example, the Key Vault service consists of a resource provider named **Microsoft.KeyVault**. The resource provider defines [REST operations](https://learn.microsoft.com/rest/api/keyvault/) for managing vaults, secrets, keys, and certificates.

To deploy a resource in Azure, you must ensure your Azure subscription is registered for the resource provider that is associated with that resource. Registration configures your subscription to work with the resource provider. You can view a list of all resource providers in Azure by service [here](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-services-resource-providers#registration). Learn how to view all your resource providers in the portal [here](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-providers-and-types#view-resource-provider).

## Default Resource Providers

Some resource providers are turned on by Azure by default on all subscriptions during time of subscription creation and are not possible to unregister. Some examples are Microsoft.SerialConsole, Microsoft.Authorization, and Microsoft.Consumption. You can view a list of providers turned on by default by service [here](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-services-resource-providers#registration). Resource providers marked with **- registered by default** in the tables are automatically registered for your subscription, and you do not need to worry about them.

## Resource Providers for Enterprise-Scale ALZ Deployment (Empty Subscriptions)

To successfully deploy an Enterprise-Scale with a predefined [template](https://aka.ms/caf/ready/accelerator), along with ensuring other [prerequisites](https://github.com/Azure/Enterprise-Scale/wiki/Deploying-ALZ-Pre-requisites) are complete, ensure these Resource Providers are [registered](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-providers-and-types) in ALL subscriptions associated with your new Landing Zone:

* microsoft.insights
* Microsoft.AlertsManagement
* Microsoft.OperationalInsights
* Microsoft.OperationsManagement
* Microsoft.Automation
* Microsoft.AlertsManagement
* Microsoft.Security
* Microsoft.Network
* Microsoft.EventGrid
* Microsoft.ManagedIdentity
* Microsoft.GuestConfiguration
* Microsoft.Advisor
* Microsoft.PolicyInsights

This list of RPs is all you need to deploy Enterprise Scale for EMPTY subscriptions (only resources listed in the template). If you want to deploy additional resources, please ensure the RPs for those resources are also registered.

Most of the time, if they are not registered prior, Azure should automatically register them for you. However, in some cases, deployment fails if the proper Resource Providers are not registered.

# Additional Recommended Resource Providers to Register (for common resources)

Some other common Resource Providers to consider having registered in your subscriptions for resources you may deploy are:

* Microsoft.Compute
* Microsoft.Storage
* Microsoft.ResourceHealth
* Microsoft.KeyVault
* Microsoft.Sql
* Microsoft.Capacity
* Microsoft.ManagedServices
* Microsoft.Management
* Microsoft.SecurityInsights
* Microsoft.Blueprint
* Microsoft.Cache
* Microsoft.RecoveryServices
1 change: 1 addition & 0 deletions docs/wiki/Whats-new.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,6 +81,7 @@ Yes, the Q2 Policy Refresh has been delayed due to a light past quarter and some
#### Documentation

- Updated broken links in [Deploying ALZ ZT Network](https://github.com/Azure/Enterprise-Scale/wiki/Deploying-ALZ-ZTNetwork#azure-landing-zone-portal-accelerator-deployment-with-zero-trust-network-principles)
- Added wiki document for recommended Resource Providers to register for Subscriptions in ALZ [ALZ Azure Resource Provider Recommendations](https://github.com/Azure/Enterprise-Scale/wiki/ALZ-Resource-Provider-Recommendations)

### December 2023

Expand Down
1 change: 1 addition & 0 deletions docs/wiki/_Sidebar.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@
* [What happens when you deploy Enterprise-Scale?](./How-Enterprise-Scale-Works#what-happens-when-you-deploy-enterprise-scale)
* Deploying Enterprise-Scale
* [Pre-requisites](./Deploying-ALZ-Pre-requisites)
* [ALZ Resource Providers Guidance](./ALZ-Resource-Provider-Recommendations)
* [Configure Microsoft Entra permissions](./ALZ-Setup-aad-permissions)
* [Configure Azure permissions](./ALZ-Setup-azure)
* [Deploy landing zones](./ALZ-Deploy-landing-zones)
Expand Down

0 comments on commit d128e8b

Please sign in to comment.