azure_analyze_vnet_peering
Analyze Azure VNet peering security and network topology to identify risks like forwarded traffic, gateway transit misuse, and cross-tenant peering. Validate hub-spoke topology and network segmentation.
Instructions
NEW in v1.14.0 Analyze VNet peering security and network topology. Checks: peering state (connected/disconnected), allow forwarded traffic (security risk), allow gateway transit (privilege escalation), remote gateway usage, peering across subscriptions/tenants, hub-spoke topology validation, network isolation boundaries. Returns: peering security risks, network segmentation validation, cross-tenant peering warnings, topology visualization.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| subscriptionId | Yes | Azure subscription ID | |
| resourceGroup | No | Optional: Filter by specific resource group | |
| detectTopology | No | Detect and visualize hub-spoke or mesh network topology. Default: true | |
| checkCrossTenant | No | Validate cross-tenant peering security. Default: true | |
| format | No | Output format: 'markdown' (default, human-readable) or 'json' (machine-readable) |