Features · Azure
Azure probes — shipped.
10 probes via a live azure-sdk-for-go wrapper: Azure SQL, AKS control-plane + node pools, Managed Identities, Subnets, Application Gateway backends, App Service certs, Storage public-access, Key Vaults. AAD Workload Identity — zero long-lived credentials. Read-only by design.
10 Azure cloud probes, modelled on the AWS set, using a live azure-sdk-for-go wrapper and AAD Workload Identity (off by default; cloud.azure.enabled=true; per-probe toggles under cloud.azure.probes). The three formerly-unmeasured signals are now live: SQL storage_percent is fetched from Azure Monitor metrics, App Gateway backend health comes from the BackendHealth LRO, and subnet used-IPs are counted from every subnet-attached resource (NIC IP configs, AppGW IP configs, IP-config profiles, private endpoints) so available = total − used. Azure Monitor reads stay best-effort — 'not measured' when no recent datapoint exists, never a silent pass. Everything else (Azure SQL state/backup/tier, AKS control-plane + node pools, Managed Identity role-assignments, cert expiry, Storage public-access, Key Vault) is fetched live. Read-only by design.