Document Details

Automation Secure Asset Encryption
Home / Scan #41 / Automation Secure Asset Encryption
Sad Tux - Windows bias detected
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types
powershell_heavy
windows_first
missing_linux_example
windows_tools
Summary
The documentation page demonstrates a strong Windows bias by providing only PowerShell examples for all command-line operations, referencing Windows-centric tools (Azure Az PowerShell module), and omitting equivalent instructions for Linux users (e.g., Azure CLI, Bash, or cross-platform scripting). REST API examples are present, but when it comes to scripting, only PowerShell is covered. There are no Linux shell or Azure CLI examples, and PowerShell is always presented first and exclusively.
Recommendations
  • Add Azure CLI (az) examples alongside all PowerShell examples for each operation (assigning identities, setting access policies, rotating keys, etc.), as Azure CLI is cross-platform and widely used on Linux.
  • Include Bash script snippets where appropriate to demonstrate automation for Linux users.
  • Explicitly mention that the PowerShell examples can be run on PowerShell Core on Linux/macOS, or clarify platform requirements.
  • Reorder or parallelize example sections so that PowerShell and CLI/Bash examples are presented together, not with PowerShell always first.
  • Reference and link to Azure CLI documentation as prominently as PowerShell documentation.
  • Consider including a table comparing PowerShell and CLI commands for common tasks.
GitHub Create Pull Request

Scan History

Date Scan Status Result
2025-07-12 23:44 #41 cancelled Biased Biased
2025-07-12 00:58 #8 cancelled Clean Clean
2025-07-10 05:06 #7 processing Clean Clean
2025-07-09 23:22 #6 cancelled Clean Clean

Flagged Code Snippets

# Revise variables with your actual values.
$resourceGroup = "ResourceGroupName"
$automationAccount = "AutomationAccountName"
$vaultName = "KeyVaultName"
$keyName = "KeyName"

Set-AzAutomationAccount `
    -ResourceGroupName $resourceGroup `
    -Name $automationAccount `
    -AssignSystemIdentity

(Get-AzAutomationAccount `
    -ResourceGroupName $resourceGroup `
    -Name $automationAccount).Encryption `
    |  ConvertTo-Json 

$principalID = (Get-AzAutomationAccount `
    -ResourceGroupName $resourceGroup `
    -Name $automationAccount).Identity.PrincipalId

$principalID

Set-AzKeyVaultAccessPolicy `
    -VaultName $vaultName `
    -ObjectId $principalID `
    -PermissionsToKeys Get, Recover, UnwrapKey, WrapKey

Add-AzKeyVaultKey `
    -VaultName $vaultName `
    -Name $keyName `
    -Destination 'Software'

$vaultURI = (Get-AzKeyVault -VaultName $vaultName).VaultUri
$keyVersion = (Get-AzKeyVaultKey -VaultName $vaultName -KeyName $keyName).Version

Set-AzAutomationAccount `
    -ResourceGroupName $resourceGroup `
    -Name $automationAccount `
    -AssignSystemIdentity `
    -KeyName $keyName `
    -KeyVaultUri $vaultURI `
    -KeyVersion $keyVersion `
    -KeyVaultEncryption