Azure

Shutdown and Startup Azure VM’s based on Tags

26/12/2023 - By Richhimself

Like many people we want to shutdown Azure VM’s when they are not being used, however with different time zones and working schedules this can vary. The obvious way is to shutdown VM’s based on Tags.

Jobs can be scheduled through the Automation Account or via a Logic App if preferred.

The script was originally created by Christopher Scott, however it was using the older commands. I’ve updated the commands and also allowed for the tag name to be set as a Runbook Parameter when executing, these can easily be changed. This script is set to use an Azure RunAs Automation Account, but this can of course be run interactively by removing this section. The script is set to use a Tag called “ShutdownCycle” you can change this to whatever you want.

Shutdown Script

param
([parameter(Mandatory=$true)]
    [string]$TagValue
)
##################### Connect to Azure using RunAsAccount #####################
$connectionName = "AzureRunAsConnection"
try
{
    $servicePrincipalConnection=Get-AutomationConnection -Name $connectionName         
    "Logging in to Azure..."
    Connect-AzAccount `
        -ServicePrincipal `
        -TenantId $servicePrincipalConnection.TenantId `
        -ApplicationId $servicePrincipalConnection.ApplicationId `
        -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint 
}
catch {
    if (!$servicePrincipalConnection)
    {
        $ErrorMessage = "Connection $connectionName not found."
        throw $ErrorMessage
    } else{
        Write-Error -Message $_.Exception
        throw $_.Exception
    }
}
#This is where you would set your custom Tags Keys and Values
$VMs = Get-AzVm  |  Where {$_.Tags.Keys -contains "ShutdownCycle" -and $_.Tags.Values -contains "$TagValue"} | Select Name, ResourceGroupName, Tags
ForEach ($VM in $VMs)
{
     $VMStatus2 = Get-AzVM -Name $VM.Name -ResourceGroupName $VM.ResourceGroupName -Status | 
    Select Name, ResourceGroupName, DisplayStatus, Tags
    $VMN=$VM.Name
    $VMRG=$VM.ResourceGroupName
        If ($VMStatus2 = "VM Running") 
            {
                Stop-AzVM -Name $VMN -ResourceGroupName $VMRG -force
                "$VMN is Shutdown and Deallocated"
            }
                   
}

param

([parameter(Mandatory=$true)]

[string]$TagValue

)

##################### Connect to Azure using RunAsAccount #####################

$connectionName = "AzureRunAsConnection"

try

{

$servicePrincipalConnection=Get-AutomationConnection -Name $connectionName

"Logging in to Azure..."

Connect-AzAccount `

-ServicePrincipal `

-TenantId $servicePrincipalConnection.TenantId `

-ApplicationId $servicePrincipalConnection.ApplicationId `

-CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint

}

catch {

if (!$servicePrincipalConnection)

{

$ErrorMessage = "Connection $connectionName not found."

throw $ErrorMessage

} else{

Write-Error -Message $_.Exception

throw $_.Exception

}

#This is where you would set your custom Tags Keys and Values

$VMs = Get-AzVm | Where {$_.Tags.Keys -contains "ShutdownCycle" -and $_.Tags.Values -contains "$TagValue"} | Select Name, ResourceGroupName, Tags

ForEach ($VM in $VMs)

{

$VMStatus2 = Get-AzVM -Name $VM.Name -ResourceGroupName $VM.ResourceGroupName -Status |

Select Name, ResourceGroupName, DisplayStatus, Tags

$VMN=$VM.Name

$VMRG=$VM.ResourceGroupName

If ($VMStatus2 = "VM Running")

{

Stop-AzVM -Name $VMN -ResourceGroupName $VMRG -force

"$VMN is Shutdown and Deallocated"

}

Start Up Script

param
([parameter(Mandatory=$true)]
    [string]$TagValue
)
##################### Connect to Azure using RunAsAccount #####################
$connectionName = "AzureRunAsConnection"
try
{
    $servicePrincipalConnection=Get-AutomationConnection -Name $connectionName         
    "Logging in to Azure..."
    Connect-AzAccount `
        -ServicePrincipal `
        -TenantId $servicePrincipalConnection.TenantId `
        -ApplicationId $servicePrincipalConnection.ApplicationId `
        -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint 
}
catch {
    if (!$servicePrincipalConnection)
    {
        $ErrorMessage = "Connection $connectionName not found."
        throw $ErrorMessage
    } else{
        Write-Error -Message $_.Exception
        throw $_.Exception
    }
}
#This is where you would set your custom Tags Keys and Values
$VMs = Get-AzVm  |  Where {$_.Tags.Keys -contains "ShutdownCycle" -and $_.Tags.Values -contains "$TagValue"} | Select Name, ResourceGroupName, Tags
ForEach ($VM in $VMs)
{
     $VMStatus2 = Get-AzVM -Name $VM.Name -ResourceGroupName $VM.ResourceGroupName -Status | 
    Select Name, ResourceGroupName, DisplayStatus, Tags
    $VMN=$VM.Name
    $VMRG=$VM.ResourceGroupName
        If ($VMStatus2 = "VM Running") 
            {
                Start-AzVM -Name $VMN -ResourceGroupName $VMRG
                "$VMN is Started"
            }
                   
}