Remove Unattached Virtual Machine Disk Volume
More Info:
Identify any unattached (unused) Microsoft Azure virtual machine disk volumes available within your Azure cloud account and delete them in order to lower the cost of your monthly bill and reduce the risk of sensitive data leakage.Risk Level
MediumAddress
SecurityCompliance Standards
HITRUSTTriage and Remediation
Remediation
Using Console
Using Console
Sure, here are the step-by-step instructions to remediate the “Remove Unattached Virtual Machine Disk Volume” misconfiguration for Azure using the Azure console:
- Log in to the Azure portal (https://portal.azure.com/).
- Click on the “Virtual machines” option in the left-hand menu.
- Select the virtual machine that has the unattached disk volume you want to remove.
- Click on the “Disks” option in the left-hand menu.
- Identify the unattached disk volume by looking for the “Unattached” status in the “Status” column.
- Select the unattached disk volume by clicking on its name.
- Click on the “Delete” button in the top menu bar.
- In the confirmation window, click on the “Yes” button to confirm that you want to delete the unattached disk volume.
Using CLI
Using CLI
To remediate the “Remove Unattached Virtual Machine Disk Volume” misconfiguration for AZURE using AZURE CLI, you can follow these step-by-step instructions:
- Open the AZURE CLI on your computer.
-
Run the following command to list all the virtual machines in your subscription:
az vm list --query "[].{name:name,resourceGroup:resourceGroup}" --output tableThis will list all the virtual machines in your subscription along with their resource group. - Identify the virtual machine for which there are unattached disks.
-
Run the following command to list all the disks in your subscription:
az disk list --query "[].{name:name,resourceGroup:resourceGroup}" --output tableThis will list all the disks in your subscription along with their resource group. - Identify the unattached disks that belong to the virtual machine identified in step 3.
-
Run the following command to delete the unattached disk:
az disk delete --name <disk-name> --resource-group <resource-group-name>Replace<disk-name>with the name of the unattached disk and<resource-group-name>with the name of the resource group the disk belongs to. - Confirm the deletion by typing “y” when prompted.
- Repeat steps 6 and 7 for all the unattached disks that belong to the identified virtual machine.
- Verify that all the unattached disks have been deleted by running the command in step 4 again. This completes the remediation of the “Remove Unattached Virtual Machine Disk Volume” misconfiguration for AZURE using AZURE CLI.
Using Python
Using Python
To remediate the “Remove Unattached Virtual Machine Disk Volume” misconfiguration in Azure using Python, you can follow the below steps:
- Import the necessary libraries:
- Authenticate with Azure using the
DefaultAzureCredentialclass:
- Get a list of all virtual machines in the subscription:
- For each virtual machine, get a list of all the disk volumes attached to it:
- For each disk volume, check if it is attached to any virtual machine. If it is not attached, delete the disk volume:
- Run the Python script and verify that all unattached disk volumes have been removed.