---
id: c7n-azure
version: "0.7.50"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# c7n-azure — Cloud Custodian - Azure Support

License: permissive · Maintenance: active · Downloads: 86.5K/mo

## What it is and what it does

This package extends a policy engine to Azure, letting you write declarative YAML policies that specify which Azure resources to target, how to filter them, and what actions to take—tagging, deletion, remediation, or reporting. It integrates with Azure's management APIs to discover and act on resources at scale.

It's designed for teams managing compliance, cost control, and resource lifecycle across Azure subscriptions. Policies run on-demand, scanning resources and applying consistent governance rules without manual intervention. The plugin depends on 80 Azure SDK packages to access different Azure services.

Use it for:

- Automatically tag all untagged virtual machines or storage accounts for cost allocation and compliance tracking.
- Enforce compliance by finding and reporting resources that violate security policies.
- Remediate drift by stopping unused compute resources or deleting orphaned disks to reduce cloud spend.
- Audit resource creation and modification across subscriptions and log policy execution for compliance reports.
- Enforce naming conventions and resource group organization across Azure deployments.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

An Azure plugin for Cloud Custodian that automates policy-driven governance and compliance across Azure resources through declarative YAML policies.

Yes. The package is actively maintained, has no known vulnerabilities, and solves a real problem—scaling governance across Azure. Install it if you need policy-driven compliance, cost control, or resource lifecycle automation. The 80 Azure SDK dependencies are a one-time cost reflecting genuine breadth of Azure service coverage.

## Install

pip install c7n-azure
uv add c7n-azure
poetry add c7n-azure

## Installing c7n-azure

Before you install: Low install friction with a pure-Python wheel. Active maintenance with a recent release 78 days ago and ongoing commits. Requires 80 Azure SDK dependencies, which is substantial but reflects the breadth of Azure services it can govern.

License in practice: Apache-2.0 permissive license allows use in commercial and proprietary projects with minimal restrictions; you must retain license notices.

Quickstart:

pip install c7n-azure

Create custodian.yml:
policies:
  - name: tag-vms
    resource: azure.vm
    actions:
      - type: tag
        tag: Environment
        value: Production

custodian run --output-dir=. custodian.yml

Requires Azure authentication (Azure CLI login or environment variables) and Python 3.9.2 or later.

Verify before relying:

- Whether the 80 Azure SDK dependencies are all required at runtime or some are optional based on resource types.
- Performance characteristics and scalability limits when running policies against large Azure environments.
- Whether policies can be scheduled automatically or if orchestration requires external tooling.

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 86.5K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

azure resource governance automation, azure compliance policy enforcement, azure resource tagging automation, cloud cost and compliance management, azure infrastructure policy as code, azure resource lifecycle management, azure policy engine, azure-governance, policy-as-code, compliance-automation

[View on SkillFed](https://skillfed.io/packages/c7n-azure) · [View on PyPI](https://pypi.org/project/c7n-azure/)