When securing your Azure environment, the use of private links is a requirement to keep all traffic among your different Azure services within your borders in Azure. In this Kusto Query Language, we will list any deleted private links on your subscription, which is a helpful query to have in your toolbox.
The results of the query are depicted in the image below.
The query required to provide that output is listed below.
AzureActivity | where TimeGenerated > ago(24h) | where OperationNameValue matches regex '^*.PRIVATEENDPOINTCONNECTIONPROXIES/DELETE.*' | where ActivityStatusValue == 'Success'
More Azure Kusto Query Language articles
- Azure Kusto Query Language hot tip: Finding out who deleted locks
- Azure Kusto Query Language hot tip: Diagnostic settings compliance
- Azure Kusto Query Language hot tip: RBAC changes