Azure Hybrid Use Benefit Policy
What it does
This Policy Template is used to automatically apply the Azure Hybrid Use Benefit (AHUB) to all eligible VMs in an Azure Subscription.
- Azure Service Principal (AKA Azure Active Directory Application) with the appropriate permissions to manage resources in the target subscription
- The following RightScale Credentials
- Follow steps to Create an Azure Active Directory Application
- Grant the Azure AD Application access to the necessary subscription(s)
- Retrieve the Application ID & Authentication Key
- Create RightScale Credentials with values that match the Application ID (Credential name:
AZURE_APPLICATION_ID) & Authentication Key (Credential name:
- Retrieve your Tenant ID
_ The policy identifies all Windows server instances that are not currently using Azure Hybrid Use Benefit. It raises an incident for all applicable VMs not currently using AHUB, which once approved, will enable AHUB on all identified instances.
- The Exclusion Tag parameter is a string value. Supply the Tag Key only. Tag Values are not analyzed and therefore are not need. If the exclusion tag key is used on an Instance, that Instance is presumed to be exempt from this policy.
- This policy does not track licenses or availability. It is your responsibility to ensure you are not underlicensed.
This policy has the following input parameters required when launching the policy.
- Azure AD Tenant ID - the Azure AD Tenant ID used for the Azure API Authentication
- Azure Subscription ID - the Azure Subscription ID used for the Azure API Authentication
- Exclusion Tag Key - an Azure-native instance tag to ignore instances that you don't want AHUB applied to. Only supply the tag key
- Email addresses of the recipients you wish to notify - A list of email addresses to notify
- Azure Resource Manager
This Policy Template does not incur any cloud costs.