Table of Contents
Why Is the Az Module Required for Azure Automation Runbooks?
Prepare for the AZ-500 exam by understanding why Azure Automation runbooks use the modern Az module for Azure Storage key rotation, not the deprecated AzureRM module.
Question
When automating key rotation, Azure Automation runbooks require the use of the AzureRM module with key rotation for Azure Storage.
A. TRUE
B. FALSE
Answer
A. TRUE
Explanation
The premise of the question is outdated, and the provided answer is incorrect based on current Microsoft standards. As of 2025, Azure Automation runbooks require the modern Az module, not the legacy AzureRM module, for automating tasks like Azure Storage key rotation. Therefore, the correct answer is B. FALSE.
Azure Automation runbooks require the legacy AzureRM module for authentication, Azure Storage interactions, and some other operations.
The Deprecation of the AzureRM Module
The AzureRM PowerShell module is a legacy module that was officially retired and deprecated on February 29, 2024. It no longer receives updates and is not guaranteed to work with newer Azure features or APIs. For all current and future automation tasks, Microsoft requires the use of the cross-platform Az PowerShell module. Relying on AzureRM for new runbooks is against best practices and will likely lead to failures.
The Current Standard: The Az Module
Modern Azure Automation runbooks should be built exclusively using the Az module. This module provides the necessary cmdlets for all interactions with Azure services.
For automating storage key rotation, a runbook would use cmdlets from the Az.Storage and Az.Accounts modules, such as:
- Connect-AzAccount: To authenticate the runbook’s managed identity.
- Get-AzStorageAccountKey: To retrieve the current storage account keys.
- New-AzStorageAccountKey: To regenerate a new key for the storage account.
Why the Distinction Matters for AZ-500
Understanding the difference between the legacy AzureRM and the current Az module is critical for the AZ-500 exam and real-world Azure security management. Exam questions and practical scenarios will assume knowledge of current tooling.
- Functionality: The Az module is the only one that receives updates for new security features and services.
- Compatibility: Runbooks using AzureRM may fail as Azure services evolve and APIs are updated.
- Best Practice: Using the Az module is the official recommendation and industry best practice for all Azure PowerShell automation.
While the provided explanation was once true, it is now obsolete. For any automation tasks involving Azure resources, including storage key rotation, Azure Automation runbooks require the Az module.
Microsoft Certified Azure Security Engineer Associate AZ-500 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft Certified Azure Security Engineer Associate AZ-500 exam and earn Microsoft Certified Azure Security Engineer Associate AZ-500 certification.