Infrastructure Toolkit

Azure Infrastructure Tools

A suite of purpose-built tools for Azure infrastructure engineers.

Available Tools

Live

Azure Network Planner

Design hub-spoke VNet topologies, allocate subnets visually, configure NSGs, Route Tables and VNet peerings, then export Bicep, ARM, PowerShell or Azure CLI deployment scripts.

Bicep ARM JSON PowerShell Azure CLI Hub-Spoke NSG Peering

Open tool

Live

Random Password Generator

Generate cryptographically strong passwords and secrets with fine-grained control over length, character sets, complexity rules and bulk generation for service accounts and key vaults.

Security Key Vault Secrets Bulk Generate

Open tool

Live

Azure Naming Tool

Generate consistent, policy-compliant Azure resource names following Microsoft's recommended naming conventions. Supports prefixes, suffixes, environment tags, region codes and bulk export for all major resource types.

Naming Convention CAF Compliance Bulk Export

Open tool

Live

App Gateway WAF Log Analyzer

Upload an Application Gateway Firewall Log export (CSV, e.g. from a Log Analytics KQL query) and instantly see blocked vs. matched traffic, top offending IPs, triggered rule groups and targeted endpoints — no KQL required.

WAF Application Gateway Security CSV Import Log Analytics

Open tool

Live

DNS Lookup

Query A, AAAA, CNAME, MX, TXT, NS, SOA and CAA records for any domain via public DNS-over-HTTPS resolvers (Cloudflare / Google) — right from the browser, no tools required.

DNS DoH MX/TXT/NS Troubleshooting

Open tool

Live

cURL Command Builder

Build HTTP requests visually — method, headers, query params, auth and body — and get ready-to-run cURL, PowerShell and Python snippets. Optional in-browser test for CORS-friendly APIs.

cURL API Testing PowerShell Python

Open tool

Azure Network Planner

no networks

Subnet Allocation

—

Total VNet IPs

—

Allocated IPs

—

Free IPs

—

Subnets

#	Subnet Name	Category	Subnet Address	Range	Prefix	Usable IPs	NSG	Route Table	Delegation

Network

Subnet Address	Netmask	Range of Addresses	Subnet Name	Usable IPs	Actions
Enter a network to begin Type a CIDR above and click Apply, then use Divide / Join to split subnets

Subnet Address

Netmask

Range of Addresses

Subnet Name

Usable IPs

Actions

Enter a network to begin

Type a CIDR above and click Apply, then use Divide / Join to split subnets

Subscription ID

SUB ID

          Used in az account set and Select-AzContext calls
        

Template Format

Bicep

ARM JSON

PowerShell

Azure CLI

Global Location

LOCATION

          Applied to all VNets unless overridden below
        

Per-VNet Location Override

Deployment Summary

No VNets configured

Go to the Subnet Planner, enter at least one VNet CIDR and select some subnets, then come back here.

Random Password Generator

Cryptographically Secure

Password Settings

Password Length

characters

—

Character Types

Uppercase letters (A–Z)

Lowercase letters (a–z)

Numbers (0–9)

Symbols (!@#$%^&*)

Exclusion Options

Exclude similar characters (i, l, 1, L, o, 0, O)

Exclude ambiguous symbols ({ [ ( ) ] } \ / ' " ` ~)

Number of Passwords to Generate

Max 50 at once

Security Analysis

Entropy

—

Character Pool

—

Possible Combinations

—

Average Time to Crack

—

Assumes 1 billion guesses per second

Security Recommendations

Generated Passwords

Configure your settings and click
Generate Passwords to begin

Azure Naming Tool

Resource Types Required

No resources selected

Main Fields

Workload / Application Name

Environment

Azure Region

Optional Fields

Instance Number

Enable

Instance Number

Format: 001, 002…

Custom Prefix

Enable

Prefix Value

Custom Suffix

Enable

Suffix Value

Separator Override

Live Preview

Select a resource type and fill in the required fields to see a live preview.

Generated Names

No names generated yet.
Go to the Name Builder tab to generate names.

App Gateway WAF Log Analyzer

Client-side only

Drop your Application Gateway log CSV here, or click to browse

Exported from a Log Analytics KQL query against AzureDiagnostics / ApplicationGatewayFirewallLog · Processed entirely in your browser — nothing is uploaded anywhere

Top rule groups triggered

Events per day

Top client IPs

Top targeted endpoints

Advanced exclusion filters

Time	Host	Client IP	Action	Rule Group	Rule ID	Request URI	Message

Heuristic analysis, not a guarantee. These are candidate exclusions inferred from this log sample by correlating requests that were Blocked with the specific rules/arguments that pushed their anomaly score over the threshold. Per Microsoft's own guidance: keep exclusions as narrow as possible (prefer a specific rule over a whole rule group), test any change in Detection mode before enforcing it, and document your policy before editing it. Review every suggestion before applying it to production.

KQL query builder

Azure Infrastructure Tools

Enter a network to begin

No VNets configured

Random Password Generator

Azure Naming Tool

App Gateway WAF Log Analyzer

Log entry detail

DNS Lookup

cURL Command Builder