Forum Discussion

Michael Carrabine's avatar
Michael Carrabine
Brass Contributor
Feb 06, 2020

FYI: Azure CIS 1.1.0 (New) Approved VM Extensions Type is NOT the Type Shown on VM Extensions Pane

Maybe this will save someone else a few hours of their life.    We recently enabled the Azure CIS 1.1.0 (New) Policy which includes an Only approved VM extensions should be installed recommendation...
Michael Carrabine's avatar
Michael Carrabine
Brass Contributor
Dec 07, 2020

You can also use this command to get the ExtensionType from the actual extensions installed on your VM.

Get-AzVMExtension -ResourceGroupName [ResourceGroupName] -VMName [VMName] | Format-List ExtensionType

 

  • hspinto's avatar
    hspinto
    Icon for Microsoft rankMicrosoft
    Aug 31, 2021

    Michael Carrabine 

     

    You can also use this Azure Resource Graph query to find out all the VM extensions you have in your VMs. The "extensionType" column will help you finding the correct extension type to use in ASC allowed extensions list.

     

    resources 
| where type =~ 'microsoft.compute/virtualmachines/extensions'
| extend vmName = tostring(split(id,'/')[8])
| extend extensionType = tostring(properties.type)
| project vmName, extensionType, name
| order by vmName asc, extensionType asc

Resources