anjuna-azure-cli instance

--assign-id strings
  resource ID of the identity (use [system] for system assigned identity)
--image-definition
  the Azure Image Definition to use
--image-gallery
  the Azure Image Definition's parent shared image gallery
--image-version string
  the image version to use
--location string
  (Optional) the location to associate with your resources
--name
  name of the VM instance to use
--resource-group
  the Azure resource group to be used for the artifacts needed for this operation
--role string
  role (name or resource Id) to be assigned to the system assigned identity
--scope string
  scope, specified as a resource Id, of the role for the system assigned identity
--instance-type
  Type of the VM instance to create (default: Standard_DC2as_v5)
--nics <nic> | "nic0< nic1< nic2...>"
  names (<nic> | "nic0< nic1< nic2...>") of the network interfaces to attach (default: automatically created)
--nsg_association
  name of Network Security Group (default: automatically created). Use "" for none
--storage-account
  storage account for the boot-diagnostic logs
--subnet
  name of the subnet (default: automatically created)
--vnet
  name of the virtual network (default: automatically created)

$ az vm show --name <vm-name> --resource-group <resource-group-name> --query .identity

It will return something similar to:
{
  "principalId": "0sdfeef-8ad6-4344-808c-b0b0b0b0b07e",
  "tenantId": "29098345-4cc9-4a53-a086-bfefefe89789",
  "type": "SystemAssigned",
  "userAssignedIdentities": null
}

  There are two types of managed identities:
    System-assigned. Some Azure resources, such as virtual machines, allow you to enable a managed identity directly on the resource. When you enable a system-assigned managed identity:
        A service principal of a special type is created in Azure AD for the identity. The service principal is tied to the lifecycle of that Azure resource. When the Azure resource is deleted, Azure automatically deletes the service principal for you.
        By design, only that Azure resource can use this identity to request tokens from Azure AD.
        You authorize the managed identity to have access to one or more services.
        The name of the system-assigned service principal is always the same as the name of the Azure resource it is created for. For a deployment slot, the name of its system-assigned identity is `<app-name>/slots/<slot-name>`.
    User-assigned. You may also create a managed identity as a standalone Azure resource. You can create a user-assigned managed identity and assign it to one or more Azure Resources. When you enable a user-assigned managed identity:
        A service principal of a special type is created in Azure AD for the identity. The service principal is managed separately from the resources that use it.
        User-assigned identities can be used by multiple resources.
        You authorize the managed identity to have access to one or more services.

$ anjuna-azure-cli instance create \
  --name my-cvm-instance \
  --location westus \
  --image-gallery myimagegallery \
  --image-definition hello-world-boot-disk \
  --image-version 1.0.0 \
  --resource-group myresourcegroup \
  --storage-account mystorageaccount \
  --nics example-nic

$ cat network.tf
# Terraform script for creating a permissive network configuration
# Network Security Group
resource "azurerm_network_security_group" "nsg" {
  name                = "example-nsg"
  location            = example.location
  resource_group_name = example.resource_group

  security_rule {
    name                       = "SSH"
    priority                   = 1001
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "22"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }

  security_rule {
    name                       = "HTTP"
    priority                   = 1020
    direction                  = "Outbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "80"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }

  security_rule {
    name                       = "HTTPS"
    priority                   = 1021
    direction                  = "Outbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "443"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }

  security_rule {
    name                        = "ping"
    priority                    = 1050
    direction                   = "Inbound"
    access                      = "Allow"
    protocol                    = "Icmp"
    source_port_range           = "*"
    destination_port_range      = "*"
    source_address_prefix       = "*"
    destination_address_prefix  = "*"
  }

}

# Virtual Network
resource "azurerm_virtual_network" "vnet" {
  name                = "example-network"
  address_space       = ["10.0.0.0/16"]
  location            = example.location
  resource_group_name = example.resource_group
}

# Subnet
resource "azurerm_subnet" "subnet" {
  name                 = "example-subnet"
  resource_group_name  = example.resource_group
  virtual_network_name = azurerm_virtual_network.vnet.name
  address_prefixes     = ["10.0.1.0/24"]
}

# Associate Network Security Group with Subnet
resource "azurerm_subnet_network_security_group_association" "nsg_association" {
  subnet_id                 = azurerm_subnet.subnet.id
  network_security_group_id = azurerm_network_security_group.nsg.id
}

resource "azurerm_public_ip" "public_ip" {
  name                = "example-pip"
  location            = example.location
  resource_group_name = example.resource_group
  allocation_method   = "Dynamic"
}

resource "azurerm_network_interface" "nic" {
  name                = "example-nic"
  location            = example.location
  resource_group_name = example.resource_group

  ip_configuration {
    name                          = "internal"
    subnet_id                     = azurerm_subnet.subnet.id
    private_ip_address_allocation = "Dynamic"
    public_ip_address_id          = azurerm_public_ip.public_ip.id
  }
}

--json
  Get instance details formatted as JSON data (verbose)
--name string
  Name of the VM instance to use, required
--query string
  JSON query string. See http://jmespath.org/ for more information and examples.
--resource-group
  Azure resource group to use, required

$ anjuna-azure-cli instance describe \
  --name my-cvm-instance \
  --resource-group myresourcegroup

Name             ResourceGroup       PowerState      PublicIps    Fqdns    Location    Zones
---------------  ------------------  --------------  -----------  -------  ----------  -------
my-cvm-instance  myresourcegroup     VM deallocated  192.168.1.1           eastus

$ anjuna-azure-cli instance describe \
  --json \
  --name my-cvm-instance \
  --resource-group myresourcegroup

{
  "additionalCapabilities": null,
  "applicationProfile": null,
  "availabilitySet": null,
  "billingProfile": null,
  "capacityReservation": null,
  "diagnosticsProfile": {
    "bootDiagnostics": {
      "enabled": true,
      "storageUri": null
    }
  },
  "evictionPolicy": null,
  "extendedLocation": null,
  "extensionsTimeBudget": null,
  "fqdns": "",
  "hardwareProfile": {
    "vmSize": "Standard_D2s_v3",
    "vmSizeProperties": null
  },
...
}

--name string
  Name of the VM instance to use, required
--resource-group
  Azure resource group to use, required
--tail
  Continuously poll for new boot log messages (press CTRL-C to exit)

$ anjuna-azure-cli instance log \
  --name my-cvm-instance \
  --resource-group myresourcegroup

GRUB_FORCE_PARTUUID set, attempting initrdless boot.
[    0.000000] Linux version 5.15.0-1039-azure (buildd@lcy02-amd64-067) (gcc (Ubuntu 9.4.0-1ubuntu1~20.04.1) 9.4.0, GNU ld (GNU Binutils for Ubuntu) 2.34) #46~20.04.1-Ubuntu SMP Mon May 22 19:42:46 UTC 2023 (Ubuntu 5.15.0-1039.46~20.04.1-azure 5.15.98)
[    0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-5.15.0-1039-azure root=PARTUUID=009f94b8-8128-45cc-90af-ef644b24e646 ro console=tty1 console=ttyS0 earlyprintk=ttyS0 panic=-1
...
$

$ anjuna-azure-cli instance log \
  --tail \
  --name my-cvm-instance \
  --resource-group myresourcegroup

Tailing boot log, press CTRL-C to exit..
GRUB_FORCE_PARTUUID set, attempting initrdless boot.
[    0.000000] Linux version 5.15.0-1039-azure (buildd@lcy02-amd64-067) (gcc (Ubuntu 9.4.0-1ubuntu1~20.04.1) 9.4.0, GNU ld (GNU Binutils for Ubuntu) 2.34) #46~20.04.1-Ubuntu SMP Mon May 22 19:42:46 UTC 2023 (Ubuntu 5.15.0-1039.46~20.04.1-azure 5.15.98)
[    0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-5.15.0-1039-azure root=PARTUUID=009f94b8-8128-45cc-90af-ef644b24e646 ro console=tty1 console=ttyS0 earlyprintk=ttyS0 panic=-1
...

--name string
  Name of the VM instance to use, required
--resource-group
  Azure resource group to use, required

--name string
  Name of the VM instance to use, required
--resource-group
  Azure resource group to use, required

-d, --delete-nics
  add this flag to delete the attached nics (default: false), optional
-n, --name string
  Name of the VM instance to use, required
-g, --resource-group string
  the Azure resource group to be used, required
-s, --subscription-id string
  Azure subscription ID to use, optional