Governance Insights

Azure Resource Graph Health Queries

Bookmarkable query references for finding resilience, storage, and secrets-governance gaps across Azure estates. Each entry explains the detection logic, expected output, and dashboard value.

Search queries

Compute / Resilience

VMs Without Backup

Identifies virtual machines that do not have an associated Recovery Services backup item.

Dashboard value

A fast inventory of unprotected virtual machines.
A focused list of workloads with a disaster recovery gap.

Storage / Security

Storage Risk Configuration

Flags storage accounts with legacy TLS, enabled blob public access, or missing blob/file soft delete protections.

Dashboard value

A consolidated view of storage hardening gaps.
A direct signal for potential data exposure risk.

Security / Secrets Governance

Key Vault Protection Gaps

Detects Key Vault instances where soft delete or purge protection is disabled.

Dashboard value

A direct view of critical Key Vault protection gaps.
A measurable secrets-governance baseline signal.