c7n-azure

What it is and what it does

This package extends a policy engine to Azure, letting you write declarative YAML policies that specify which Azure resources to target, how to filter them, and what actions to take—tagging, deletion, remediation, or reporting. It integrates with Azure's management APIs to discover and act on resources at scale.

It's designed for teams managing compliance, cost control, and resource lifecycle across Azure subscriptions. Policies run on-demand, scanning resources and applying consistent governance rules without manual intervention. The plugin depends on 80 Azure SDK packages to access different Azure services.

Use it for:

• Automatically tag all untagged virtual machines or storage accounts for cost allocation and compliance tracking.
• Enforce compliance by finding and reporting resources that violate security policies.
• Remediate drift by stopping unused compute resources or deleting orphaned disks to reduce cloud spend.
• Audit resource creation and modification across subscriptions and log policy execution for compliance reports.
• Enforce naming conventions and resource group organization across Azure deployments.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

An Azure plugin for Cloud Custodian that automates policy-driven governance and compliance across Azure resources through declarative YAML policies.

Yes. The package is actively maintained, has no known vulnerabilities, and solves a real problem—scaling governance across Azure. Install it if you need policy-driven compliance, cost control, or resource lifecycle automation. The 80 Azure SDK dependencies are a one-time cost reflecting genuine breadth of Azure service coverage.

Install

c7n-azure on PyPI

pip install c7n-azure

uv add c7n-azure

poetry add c7n-azure

Installing c7n-azure

Before you install

Low install friction with a pure-Python wheel. Active maintenance with a recent release 78 days ago and ongoing commits. Requires 80 Azure SDK dependencies, which is substantial but reflects the breadth of Azure services it can govern.

License in practice

Apache-2.0 permissive license allows use in commercial and proprietary projects with minimal restrictions; you must retain license notices.

Quickstart

pip install c7n-azure

Create custodian.yml:
policies:
  - name: tag-vms
    resource: azure.vm
    actions:
      - type: tag
        tag: Environment
        value: Production

custodian run --output-dir=. custodian.yml

Requires Azure authentication (Azure CLI login or environment variables) and Python 3.9.2 or later.

Verify before relying

• Whether the 80 Azure SDK dependencies are all required at runtime or some are optional based on resource types.
• Performance characteristics and scalability limits when running policies against large Azure environments.
• Whether policies can be scheduled automatically or if orchestration requires external tooling.

Package facts

Evidence: c7n_azure-0.7.50-py3-none-any.whl

Tags

More Distributed Computing packages