🛡️ Azure DevTest Lab Virtual Machine auto-shutdown is disabled🟢

• Contextual name: 🛡️ DevTest Lab VM auto-shutdown is disabled🟢
• ID: /ce/ca/azure/devtest-labs/virtual-machine-auto-shutdown-disabled
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: BEST_PRACTICE
• Policy Categories: COST

Stats

not available

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 Azure DevTest Virtual Machine
  • 🔌 Azure DevTest Virtual Machine - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

Enable auto-shutdown for Azure DevTest Lab virtual machines unless the workload has an approved operational exception. The applicable lab schedule controls the time at which DevTest Lab shuts down virtual machines that are no longer needed.

Rationale

Development and test workloads commonly run only during defined hours. An enabled auto-shutdown schedule prevents unattended virtual machines from continuing to consume billable compute resources outside those hours.

Impact

Without auto-shutdown, inactive DevTest Lab virtual machines can continue to incur compute charges. Enabling a schedule can interrupt workloads that are legitimately needed after hours, so confirm the lab's maintenance window, time zone, and approved exceptions before changing it.

Audit

This policy marks an Azure DevTest Lab Virtual Machine as INCOMPLIANT if its applicable labVmsShutdown schedule:

• Is missing, or
• Has a status other than Enabled.

Default Value

By default, lab auto-shutdown is disabled.

References

• https://learn.microsoft.com/en-us/azure/devtest-labs/devtest-lab-auto-shutdown

... see more

Remediation

Open File

Remediation

Before enabling auto-shutdown, confirm the lab's operating hours, maintenance windows, time zone, notification recipients, and any approved exception for workloads that must remain available after hours.

Azure portal

1. Open the affected Azure DevTest Lab.
2. Select Configuration and policies, then Auto-shutdown.
3. Set Enabled to On, then set a shutdown time and time zone that match the lab's approved operating schedule.
4. Configure notifications as required and select Save.
5. For a VM with an individual schedule, open the VM, select Operations, then Auto-shutdown, and set Enabled to On. Individual VM schedules can override the lab schedule when the lab's auto-shutdown policy permits them.
6. Verify that each affected VM reports an applicable shutdown schedule with status Enabled after the next Cloudaware collection.

Automation

For infrastructure-as-code or API-based remediation, create or update the Microsoft.DevTestLab/labs/schedules resource named labVmsShutdown with

... see more

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 Cloudaware Framework → 💼 Resource Optimization			37		no data