Azure ARM Cloud Module

New in version 2016.11.0.

Changed in version 2019.2.0.

The Azure ARM cloud module is used to control access to Microsoft Azure Resource Manager


Required provider parameters:

if using username and password:
  • subscription_id

  • username

  • password

if using a service principal:
  • subscription_id

  • tenant

  • client_id

  • secret

Optional provider parameters:

cloud_environment: Used to point the cloud driver to different API endpoints, such as Azure GovCloud. Possible values:
  • AZURE_PUBLIC_CLOUD (default)




  • HTTP base URL for a custom endpoint, such as Azure Stack. The /metadata/endpoints path will be added to the URL.

userdata and userdata_file:

Azure Resource Manager uses a separate VirtualMachineExtension object to pass userdata scripts to the virtual machine. Arbitrary shell commands can be passed via the userdata parameter, or via a file local to the Salt Cloud system using the userdata_file parameter. Note that the local file is not treated as a script by the extension, so "one-liners" probably work best. If greater functionality is desired, a web-hosted script file can be specified via userdata_file:, which will be executed on the system after VM creation. For Windows systems, script files ending in .ps1 will be executed with powershell.exe. The userdata parameter takes precedence over the userdata_file parameter when creating the custom script extension.


This parameter, which holds the local path to the Salt Minion installer package, is used to determine if the virtual machine type will be "Windows". Only set this parameter on profiles which install Windows operating systems.

Example /etc/salt/cloud.providers or /etc/salt/cloud.providers.d/azure.conf configuration:

my-azure-config with username and password:
  driver: azurearm
  subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617
  username: larry
  password: 123pass

Or my-azure-config with service principal:
  driver: azurearm
  subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617
  client_id: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF
  cloud_environment: AZURE_US_GOV_CLOUD

  The Service Principal can be created with the new Azure CLI ( with:
  az ad sp create-for-rbac -n "http://<yourappname>" --role <role> --scopes <scope>
  For example, this creates a service principal with 'owner' role for the whole subscription:
  az ad sp create-for-rbac -n "http://mysaltapp" --role owner --scopes /subscriptions/3287abc8-f98a-c678-3bde-326766fd3617

  *Note: review the details of Service Principals. Owner role is more than you normally need, and you can restrict
  scope to a resource group or individual resources.

Return a dict of all available images on the provider

Return a dict of all available regions.

Return a list of sizes available from the provider

Create a single VM from a data dict., kwargs=None)

Create a network interface., kwargs=None)

New in version 2019.2.0.

Create or update a VM extension object "inside" of a VM object.

required kwargs:
extension_name: myvmextension
virtual_machine_name: myvm
settings: {"commandToExecute": "hostname"}
optional kwargs:
resource_group: < inferred from cloud configs >
location: < inferred from cloud configs >
publisher: < default: Microsoft.Azure.Extensions >
virtual_machine_extension_type: < default: CustomScript >
type_handler_version: < default: 2.0 >
auto_upgrade_minor_version: < default: True >
protected_settings: < default: None >, kwargs=None)

Delete a blob from a container., kwargs=None)

Delete a network interface., kwargs=None)

Delete a managed disk from a resource group., call=None, kwargs=None)

Destroy a VM.

CLI Examples:

salt-cloud -d myminion
salt-cloud -a destroy myminion service_name=myservice, kwargs=None)

Get a resource type api versions

Return the first configured provider instance.

Return a connection object for a client type.

Warn if dependencies aren't met., kwargs=None)

Return the location that is configured for this provider, api_version, extract_value=None)

Get an AzureARM resource by id, kwargs=None)

List blobs.

List VMs on this Azure account

List all VMs on the subscription with full information

List resource groups associated with the subscription

List storage accounts within the subscription., kwargs=None)

List subnets in a virtual network., kwargs=None)

List virtual networks.

Request a VM from Azure., call=None)

Show the details from AzureARM concerning an instance, call=None)

New in version 2019.2.0.

Start a VM

CLI Examples:

salt-cloud -a start myminion, call=None)

New in version 2019.2.0.

Stop (deallocate) a VM

CLI Examples:

salt-cloud -a stop myminion