As an Azure VM user/administrator, I would like to be able to take an existing VM priced at one rate, and "upgrade" the pricing to include licensing for products installed after provisioning. I would like this to provide flexibility (e.g., if I want to install SQL Server on a Windows priced VM, without losing install/configuration work already undertaken on that VM and without independently licensing SQL; or if I want to add BizTalk to a Win/SQL-priced VM). I would also like this to allow simplified compliance (e.g., a Windows-priced VM is found to have SQL Server installed after provisioning), to allow upgraded/hourly pricing to be applied to an existing VM to reflect installed Microsoft products (at least).

Central IP Object usable for ALL Azure Resources

In this new feature (ex : Azure IP Object management) user can create IP Object (List of Ips or Subnet) this object can be added in any Azure Resources who have a Firewall (Azure SQL, Storage Account, WebApp,...)

For Exemple:
You create an Object "Company Public IPs" and you add in this object All your company Public IP.
In your Azure resources Firewall (WebApp, AzureDB, NSG,...) you specify this Object to allowing access.

If tomorrow you need to add a new public IP you just need to add this new public IP in your "Company Public IPs" Object and all resources link to this object will allow this new IP (cf: diagram)

Matthieu

The current available tools for visualizing and alerting on available Disk Space for Azure Virtual Machines should be expanded. In the Dashboards module, there is no Live Tile that would allow you to see a Virtual Machine's disks and available space. You can get some data through custom queries, but these queries are manual-refresh only and are not truly suited to a live Dashboard environment.

Similarly, there is no way to create an Alert for low disk space in the current Alerts module. In Alerts (Classic) there was a % Free Disk Space - this is not sufficient because it would not alert you to an individual disk being full. In Alerts (non-classic) there is no Alert Criteria in either Disks or Virtual Machines that would allow you to monitor the free space associated with any disks on a Virtual Machine.

Currently there is no way to sepcify which storage replication is wanted when you create a Recovery Services Vault via ARM templates.

The default when spinning up a vault is GRS, and the only way to change it is to log into the portal and choose LRS before any backups have been applied.

The fact that the type of storage replication cannot be changed after a backup has been set does not help the situation.

This makes automating infrastrucutre builds painful as I have to login and change the setting in the portal before i am able to continue adding machines to the vault.

The documentation for the Vault is here:
https://docs.microsoft.com/en-us/azure/templates/microsoft.recoveryservices/vaults

If this is already available then please update the docs and the Quick start templates to include it!

If its not available then please add it to ARM!

Quick Start Template :
https://github.com/Azure/azure-quickstart-templates/tree/master/101-recovery-services-vault-create

Currently, I don't see any way to filter resources (either in the UI or via the CLI) in such a way that I can see what any given Service Principal has on the subscription. This is important for me, as I've got multiple Principals which are each tied to a different user, and I'd like to be able to have insight into what sort of resources & usage each user on my Subscriptions are consuming.

It would be very useful to have this in both the UI for quick checks, as well as in the CLI so reports can be generated via automated scripts.

Despite that PCI compliance is promoted at Azure, a Web App created at Azure is non compliant by default, and cannot be set-up appropriately.

I understand that a Web App is not as isolated as an ASE (that still is not compliance by default, needs advanced set-up), with instances sharing system level settings with other clients (so cannot be changed independently), and I understand some set-up changes that apply to all clients, even ones that do not require PCI, can lead to problems to some of them.

I propose an option to opt-in to PCI compliance at Web App level; enable it can put the instance inside a system with appropriated set-up, shared with other clients that had enabled the option too. Alternatively (if that's not possible), a new 'PCI Web App' service, that has all Web App features plus the PCI compliance by default and keep up to date; on this case, an easy way to migrate existent Web App into this one will be useful.

As an example, a PCI Web App will disable TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS1.0, both enabled at Web App right now and not compliant.