Skip to content

olandese/EventGrid

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 

EventGrid

Description

In this demo we use Event Grid to publish Azure Subscriptions events to an Azure Function.
The Event Grid events will be filtered to be of the "Microsoft.Resources.ResourceWriteSuccess" kind.
Whenever a Storage Account will be created the function will output if the storage account is using encryption or not.

Setup

  1. Login in the Azure Portal and start the Azure Cloud Shell

  2. Set the following variables, replace <storage_name> and <app_name> with a unique name:

    rgName="EventGridTest"
    storageaccountName=<storage_name>
    appName=<app_name>
    
  3. Create a new Resource Group:

    az group create --name $rgName --location westeurope
    
  4. Create a new Storage Account:

    az storage account create --location westeurope --resource-group $rgName --sku Standard_LRS --name $storageaccountName
    
  5. Create a new Function App:

    az functionapp create --resource-group $rgName --consumption-plan-location westeurope --name $appName --storage-account $storageaccountName
    
  6. Create an automatic deployment to the function app:

    az functionapp deployment source config --repo-url https://github.com/olandese/EventGrid --branch master --manual-integration --resource-group $rgName --name $appName 
    
  7. Create a new Service Principal and make it Contributor on the subscription:

    spId="$(az ad sp create-for-rbac -n "EventGridTestSP" --role contributor --password Q1w2e3r4t5y6 --query "[appId] | [0]" --output tsv)"
    
  8. Save the Service Principal values as settings for the function:

    az webapp config appsettings set -g $rgName --name $appName --settings ClientSecret=Q1w2e3r4t5y6 ClientId=$spId 
    
  9. Create an Event Grid subscription for all successful deployments and the handler will be the function:

    az eventgrid event-subscription create --name CheckStorageAccountEncryption --included-event-types Microsoft.Resources.ResourceWriteSuccess --endpoint "https://$appName.azurewebsites.net/api/HttpTriggerCheckStorageEncryption"
    
  10. Now create in your subscription some Storage Accounts, in the function monitor output you will see if they are created with Encryption or not:

    az storage account create --resource-group $rgName --encryption blob --sku Standard_LRS --name encrypttest
    
    az storage account create --resource-group $rgName --sku Standard_LRS --name notencrypttest    
    

Cleanup

If you want to cleanup all the resources created during the previous steps:

  1. Delete the Resource Group

    az group delete --name $rgName --yes
    
  2. Delete the Event Grid Subscription

    az eventgrid event-subscription delete --name CheckStorageAccountEncryption
    
  3. Delete the Service Principal

    az ad sp delete --id "http://EventGridTestSP"
    

About

No description or website provided.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages