Automatically add an Azure Tag Using Event Grid and Azure Functions

[@raisingcode9010]

This is timeless info. Was heading down the route of setting up an activity log alert until I saw this. Thanks

[@AllenVisser]

Awesome video, thank you. Without adding the filters, both rsg's and resources are tagged correctly.

[@Ciraltos]

Glad it helped!

[@kevinziegler4105]

Love it, this very cool, especially for our sandbox environments

[@Ciraltos]

Thanks Kevin!

[@rafael.biasotto]

Hi, I have an environment with 220 subscriptions, separated by management groups with dev, hml and prd levels. Do I need to apply tags in this environment, with this script I can make this application with all subscriptions, separating by environment or is the best way to do it manually?

[@Icantmakename09]

Do you know of the Powershell or CLI script to just create a new event subscription? It keeps asking for a RG, but there isn’t any when it’s attached to the subscription.

[@anmolbhatt2073]

Hi Travis, I need to create nsg rules whenever a nsg is created using azure function with event grid. How we can do that?

[@CamiloTaborda]

Hello Travis, Thanks for this video and the AVD course I follow a few weeks ago. I'm thinking about if it's possible to set tags from a subscription to another subscriptions in the same tenant or is just in the same subscription. Thanks.

[@eashwerdev518]

can we add more tagging content other than the resource creator and time can we add more fields using this automation if so how or are we limited to only the event data

[@tejakirankumarjami9993]

Great Video Sir. I'm still new to azure and I have a quick question. For example If I have 10 subscriptions and do I need to create 10 diff azure functions for this solution as this scope is at the subscription level.

[@dharaniswarareddybhumiredd6533]

I have followed the all the steps and the result is not expected, can you please let me know how to resolve the same i am able to see the logs from event grid but the function is not changing the tags. can you please help me on this

[@365Dash]

Thanks Travis, another great video! I know this is a demo on how everything can be put together for automation using Event Grip and Az Functions. But from a solution point of view for auto tagging, is it eaiser to use Azure policy intead? Cheers.

[@Ciraltos]

An Azure policy would be a good option. I couldn't find a way to apply the creator name with a policy. That information is not part of the resourced. If I'm missing something, please let me know. A tag policy would be a simpler solution. -Travis

[@ppraveens]

Hi Could you please provide the powershell code

[@mosksky]

Travis absolutely great video!!! what if resources are created by pipeline (using spn or msi), then created by will be the SPN. Any recommendations on how to solve that?

[@Ciraltos]

Good question. The name of the SPN or MSI may not be that helpful in understanding who deployed it. If that information is in the pipeline, maybe tag the resource as part of the pipeline?

[@rendog408]

Thanks Travis, great video, I deployed without filters and it tags rsg's and resources, but then the name value in the tag disappears after a few minutes? Any clue, why this would happen?

[@Ciraltos]

Check for policies that modify tags. Also, Terraform will remove the tags if not part of the Terraform deployment.

[@tejakirankumarjami9993]

Hi Rene, Thank you for your message. I see the same happening with my RG but not with the resources, have you found out the Issue why the tags are being disappeared after a while on the RG. However, I don't see any policies enforcing

[@MrAayooshmoitro]

It's happening bcz when it adds a tag, event grid identifies it as a new creation and tries to retag them. Use below steps to correct it. Add a filter with key Name: data.operationName Operator: String is not in, Value: Microsoft.Resources/tags/write Save it and then give it a try!

[@BrandonRodriguez-nk6ei]

May be this question is out of the scope... but does anyone knows how can i achieve the same behavior in AWS (for all the possible resources)? Actually am applying this in our sandbox azure account, i would like to repeat it in AWS

[@PaulShadwell]

I like this. I want it to apply to all resources, not just the group. Am I correct in assuming I just don't apply the filter? Is there any issue applying this for all resources?

[@Ciraltos]

Without trying I can’t say for sure, but I think it you left the advance filter off it will tag everything.

[@victorrondanflores8343]

Hello, I did this with the operator "string does not contain" and it works perfect ! , and thanks to travis for the help !!

[@ruffinruffin989]

@@victorrondanflores8343 Im trying to do the same thing where it will tag all resources created. Can you share how you achieved this?

[@timreigrut4061]

@@victorrondanflores8343 What did you use for the key in this?

[@sureshkachwa5345]

@@ruffinruffin989 see the screenshot if that helps key: data.authorization.action operator: String does not contain value: nothing This worked in my case