凭据访问
Reads Azure account tokens, config files, cloud credentials, and environment variables.
代理安全
azure-cli controls Azure accounts, resources, subscriptions, and deployments.
Reads Azure account tokens, config files, cloud credentials, and environment variables.
Can create, delete, and reconfigure Azure infrastructure.
Can deploy application artifacts and infrastructure templates.
Gate mutating az commands and credential export or login changes.
Allow account/resource reads in safe subscriptions; require approval for writes and deletes.
安装
brew install azure-cliprovider-native install command
概览
Microsoft Azure CLI 2.0
历史
Azure CLI is Microsoft's cross-platform `az` command-line client for managing Azure resources. It is one of the canonical cloud-provider CLIs in package-manager indexes because it turns Azure administration, provisioning, identity, and resource inspection into scriptable shell commands.
The Azure CLI 2.x line was developed in the open at Azure/azure-cli as a next-generation, multi-platform Azure command-line experience. The repository's earliest GitHub Releases include the 0.1 beta series in 2016, followed by the 2.x release train that became the standard `az` CLI used from local terminals, CI jobs, containers, and Azure Cloud Shell.
The CLI is implemented as a Python package with command modules for Azure service areas. Microsoft Learn positions it as the primary Azure command-line surface, with configuration under the Azure CLI config directory and first-class documentation for authentication, output formatting, querying, and automation patterns.
Azure CLI became package-manager furniture because Azure users need the same `az` command on macOS, Linux, Windows, containers, and hosted CI. The input package facts list broad distribution across Homebrew, Chocolatey, Debian, Fedora/DNF, MacPorts, Nix, Arch/pacman, Scoop, winget, and zypper, which matches its role as a cloud bootstrap tool rather than an optional developer convenience.
Its presence in Azure Cloud Shell further normalized `az` as the default examples language for many Azure docs and snippets. Package users care that Homebrew and Linux packages track a large upstream release train and that shell completion, JSON/table/TSV output, and JMESPath querying make it pleasant in scripts.
Typical usage is `az group create`, `az vm create`, `az storage ...`, `az account get-access-token`, or `az rest`, usually combined with `--query` and `--output` for shell pipelines. The official docs emphasize using `az configure`, environment variables, and the INI-style config file to tune defaults.
Credentials and tokens are stored under the Azure CLI config directory; current source code uses `msal_token_cache` and `service_principal_entries` there. Package maintainers and automation users should treat the directory as sensitive state, especially on shared runners.
For package nerds, `azure-cli` is a classic heavyweight cloud CLI: fast-moving, Python-based, dependency-rich, and distributed everywhere. It stress-tests package managers on update cadence, Python dependency isolation, shell completion, telemetry defaults, and whether the packaged binary behaves the same as Microsoft's install scripts.
It also demonstrates the difference between a formula that installs a CLI and the hidden state that CLI writes under the user's home directory. Upgrades are routine, but auth caches and config files often outlive package removals.
安全态势
cloud infrastructure mutation tool.
orange 风险 · 高 置信度 · infrastructure
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.azure/config%USERPROFILE%\.azure\configCredential-bearing paths to review before unattended agent runs.
~/.azure/msal_token_cache.json~/.azure/service_principal_entries.json~/.azure/accessTokens.json可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
az | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:azure-cli |
|---|---|
| 版本 | 2.88.0 |
| 软件包管理器 | Homebrew |
| 主页 | https://docs.microsoft.com/cli/azure/overview |
| 仓库 | https://github.com/Azure/azure-cli |
| 最后更新 | 2026-07-07T09:03:39Z |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.