Azure Resource Graph in a simple way!

Azure Resource Graph is a service in Azure that is designed to extend Azure Resource Management by allowing you to query across Azure subscriptions quickly and efficiently. It allows you to analyze your cloud inventory using complex queries launched programmatically or from the Azure portal. Additionally, the service helps to assess the impact of applying policies in large cloud environments to effectively govern your environment.Azure Resource Graph in a Simple way!

These queries provide the following features:
• Ability to query resources with complex filtering, grouping, and sorting by resource properties.
• Ability to iteratively explore resources based on governance requirements.
• Ability to assess the impact of applying policies in a vast cloud environment.
• Ability to detail changes made to resource properties (preview).

The query language for the Azure Resource Graph supports a number of operators and functions. Each work and operate based on Kusto Query Language (KQL). To learn about the query language used by Resource Graph, start with the tutorial for KQL.

Deployment best practices and recommendations:
• Stay on top of your Azure Governance by using Azure Resource Graph and strengthen your security posture and general configurations.
• Query any storage account where HTTPS was not enabled, or where encryption is disabled.
• Determine what impact an Azure Policy action can result in before rolling out the policy to test whether the changes could impact any already existing resource. Visualize your inventory by using the built-in capabilities in the charts section.

examples:

• Query Azure Resources by Tags
  

resources
| where isnotempty(tags)
| where tags !has "hidden-"
| mv-expand tags
| extend tagName = tostring(bag_keys(tags)[0])
| extend tagValue = tostring(tags[tagName])

• Summarize Count of resources by Tag name
  

resources
| where isnotempty(tags)
| where tags !has "hidden-"
| mv-expand tags
| extend tagName = tostring(bag_keys(tags)[0])
| extend tagValue = tostring(tags[tagName])
| summarize count() by tagName
| order by ['count_'] desc

• Returns count of Public IPs and Type
  

Resources
| where type == "microsoft.network/publicipaddresses"
| summarize PIPs=count() by IPType=tostring(properties.publicIPAddressVersion)