All scripts
cloud
Expert
3–12 min

Azure VNET Peering Orchestrator

Azure SDK: VNET peering lifecycle, NSG rule audit (shadow/overpermissive), ExpressRoute circuit health, BGP route table pull and UDR consistency checks across a subscription.

Azure (SDK)
Open in GeneratorOpen in Platform
You're viewing a preview

The full script, parameters, and execution console are available with a free account.

Already have access? Sign in →

Capabilities

  • azure-mgmt SDK
  • VNET peering lifecycle
  • NSG shadow/overpermissive audit
  • ExpressRoute circuit health
  • BGP route table pull
  • UDR consistency check

Required inputs

Parameters the script accepts. Defaults shown; some are vendor- or context-gated.

ParameterTypeDefaultNotes
Subscription id
subscription_id
string
Resource group
resource_group
stringnet-rg
Flag any/any NSG
flag_any_any
booltrue

Hint 1Name your vendors and OS versions

Mention the exact platforms you run (Azure (SDK)) so the generated cloud logic uses the right CLI/NETCONF syntax.

Hint 2State your real thresholds

Provide concrete values for Subscription id, Resource group, Flag any/any NSG instead of the defaults — they shape what counts as a fault.

Hint 3Prioritize the checks you need

This tool can azure-mgmt SDK and vNET peering lifecycle. Ask for the subset relevant to your incident to keep output focused.

Hint 4Describe your inventory format

Tell the assistant whether your device list is CSV, YAML, or JSON and which columns it has, so parsing matches your data.

Sample inventory schema

Authoritative shape of the device/policy data this script consumes.

No bundled inventory sample. The script accepts standard device lists (CSV/YAML) with hostname, mgmt IP, vendor, and credentials.

Expected output

Reference terminal output the script should produce — used as a stylistic and structural target.

terminal
[2026-06-12] INFO  Azure: enumerating VNETs in subscription...
PEERING              STATE        NSG-ISSUE         STATUS
hub↔spoke-prod       Connected    -                 OK
hub↔spoke-dev        Disconnected -                 PEER-DOWN ←
nsg-web              any/any allow inbound          OVERPERMISSIVE ←
ExpressRoute er-mum: provisioned · BGP 2 peers up
Summary: 1 peer down · 1 NSG issue