Azure Arc

Azure Arc
Name	Azure Arc
Developer	Microsoft
Released	2019
Operating system	Windows Server, Linux, Kubernetes
Genre	Cloud computing, Hybrid cloud
License	Proprietary software

Azure Arc. It is a hybrid cloud and multi-cloud management service developed by Microsoft that extends the Azure Resource Manager control plane to infrastructure operating outside of Microsoft Azure data centers. This enables organizations to manage and govern Windows Server and Linux servers, Kubernetes clusters, and applications across on-premises, edge, and third-party cloud environments like Amazon Web Services and Google Cloud Platform as if they were native Azure resources. By projecting these external resources into Azure Resource Manager, it provides a unified management experience, centralized policy, security, and compliance enforcement, and the ability to run Azure data services anywhere.

Overview

The platform was formally announced at Microsoft Ignite in 2019 as a strategic extension of the Azure ecosystem, addressing the complex reality of modern IT infrastructure that spans multiple locations and providers. It builds upon earlier Microsoft hybrid initiatives like Azure Stack but focuses on management and governance rather than delivering Azure hardware. Core to its value proposition is enabling a consistent DevOps and GitOps practice across all environments, allowing teams to use tools like Azure DevOps and GitHub Actions uniformly. This approach helps bridge the gap between traditional on-premises data centers and the agility of the public cloud, a challenge frequently highlighted by analysts like Gartner and the International Data Corporation.

Architecture and components

The architecture centers on lightweight agents installed on target resources, such as the Azure Connected Machine agent for servers and the Azure Arc-enabled Kubernetes agents for clusters. These agents establish a secure, bidirectional connection to the Azure Arc control plane, which is part of the broader Azure Resource Manager framework. Key management components include Azure Policy for enforcing organizational standards, Azure Monitor for collecting logs and metrics, and Azure Security Center for threat protection. For data services, it can deploy instances like Azure SQL Managed Instance and PostgreSQL Hyperscale on external infrastructure, managed through the same Azure portal used for native services.

Deployment and management

Deployment typically begins by onboarding servers or clusters through automated scripts, the Azure portal, or using Windows Admin Center. For Kubernetes clusters, whether based on AKS Engine, Cluster API, or distributions like Red Hat OpenShift and VMware Tanzu, the onboarding process installs a suite of operators and Flux (a GitOps tool) on the cluster. Ongoing management is then performed centrally from Azure, where administrators can apply role-based access control (RBAC), assign Azure Policy definitions for configuration compliance, and update software using Azure Update Management. This model supports environments from branch offices to Internet of Things edge devices managed via Azure IoT Edge.

Use cases and applications

Common use cases include governing and securing multi-cloud estates, especially for organizations using Amazon EC2 or Google Compute Engine alongside Azure Virtual Machines. It is also pivotal for modernizing applications, allowing legacy applications running on VMware vSphere or Hyper-V to be managed with cloud-native practices and prepared for potential migration to Azure Kubernetes Service. In regulated industries like finance or healthcare, it enables data locality compliance by running Azure data services in on-premises data centers while maintaining cloud-based management. Furthermore, it supports large-scale edge computing scenarios for retailers like Walmart or manufacturers using Azure Stack HCI.

Integration with Azure services

The platform deeply integrates with the broader Azure ecosystem, effectively turning external infrastructure into first-class citizens within Azure Resource Manager. This enables the use of Azure Automation for process orchestration, Azure Log Analytics for centralized logging, and Azure Cost Management for tracking expenditure across clouds. Azure Arc-enabled data services integrate with Azure Backup and Azure Site Recovery for disaster recovery. The integration extends to developer and security services, allowing teams to deploy applications using Azure App Service or secure environments with Microsoft Defender for Cloud across their entire estate, unifying operations that were previously siloed.

Security and compliance

Security is enforced through a combination of the managed identities used by agents, Transport Layer Security (TLS) encrypted communications, and centralized governance via Azure Policy and Microsoft Defender for Cloud. Organizations can apply compliance benchmarks such as those from the National Institute of Standards and Technology (NIST) or the Center for Internet Security (CIS) across all connected resources. Role-based access control (RBAC) ensures least-privilege access, while audit trails are consolidated in Azure Activity Log. For highly sensitive workloads, it supports scenarios where data never leaves a private data center, addressing requirements of regulations like the General Data Protection Regulation (GDPR) and the Health Insurance Portability and Accountability Act (HIPAA).

Category:Cloud computing Category:Microsoft Azure Category:Microsoft software