Locale selector icon
Dec202215

Update to Azure Total Cost Pipeline

We are extending the deprecation date for the old Azure APIs to January 23rd, 2023. This extension will allow more time for customers to update their permissions and to avoid interrupting financial processes for month end close. Customers now have additional time to update their service principal(s) to contain the enrollmentreader permission. Customers who have not done this by January 23rd will experience a disruption in service for Azure cost data until the permissions are updated. Instructions to update your service principal can be found here. 

Moving to the new Azure Cost Management APIs is part of our effort to future-proof our platform and provide more reliable data. The change will allow customers to take advantage of new CloudHealth reporting, including Total Cost and Amortized Cost. 

Note: customers using Azure Gov Cloud will not need to take action yet. The enrollmentreader permission is not yet available in the Azure Gov Cloud environment, so those customers will remain on the old pipeline until Microsoft adds support for the new permission. 

GCP Resources Event-Based Collection and Processing Public Beta – Action Required

In January of 2023, we will enter public beta for the new event-based collection and processing system for GCP. Customers will be able to enable real-time, event-based collection of GCP resources. Customers will also have access to new GCP resources in the platform. These resources will have their own asset reports and be usable in Perspectives and Policies.  

The following new resources will be available: 

  • KMS Keyring 

  • KMS CryptoKey 

  • KMS CryptoKeyVersion 

  • GCP VPN Gateway 

  • GCP DNS Managed Zone 

  • Google Cloud Functions 

  • Committed Use Discounts 

  • GCP CloudRun 

  • GCP CloudRouter 

  • GCP Big Query Table 

  • GCP Big Query Dataset 

To prepare for this public beta and to enable event-based collection for these resources, please update your GCP service account permissions to contain the permissions below. All customers using GCP can access these new resources regardless of whether they have enabled event-based collection, but all customers must update the permissions below for collection of any type to take place.  

<Cloudfunctions.functions.get, cloudfunctions.functions.list, cloudfunctions.locations.get, compute.commitments.get, compute.commitments.list, cloudkms.locations.list, cloudkms.cryptoKeys.list, cloudkms.cryptoKeys.get, cloudkms.keyRings.list, cloudkms.keyRings.get, cloudkms.cryptoKeyVersions.list, compute.vpnGateways.get, compute.vpnGateways.list, dns.managedZones.get, dns.managedZones.list, dns.resourceRecordSets.list, compute.routers.list, compute.routers.get, run.services.list, run.revisions.list, bigquery.tables.get, bigquery.tables.list, bigquery.datasets.get> 

Note: for customers enrolled in the Private Beta, the following resources are available today: 

  • KMS Keyring 

  • KMS CryptoKey 

  • KMS CryptoKeyVersion 

  • GCP VPN Gateway 

  • GCP DNS Managed Zone 

  • Google Cloud Functions 

  • Committed Use Discount 

New Policy Action – Release Google Compute Engine (GCE) Static IP

CloudHealth now supports releasing GCE Static IPs through our policy engine. This action is now available when selecting the “Compute Static IP” resource type. To use this policy action, you will need to add the following permission: “compute.addresses.delete." 

Improvements to Performance and Latency

Our engineering teams are constantly working on ways to improve the performance of our platform and the experience it provides for our customers. To that end, we are happy to announce updates to our content delivery network that will improve our web application performance and reduce loading time across our pages. Users will notice improvements in load time and performance particularly with our FlexReports, new rightsizing engine (currently for AWS), Azure Commitment Discount Recommendations, and more.