[VM] Ability to query/manipulate `Update Management`?

Azure VMs have a preview feature called “Update Management”. This feature offers built-in update management (i.e. Windows Update, apt, etc).

Enabling the feature prompts for a log analytics workspace and an Automation account. Presumably, the automation account is where update management scheduling actually happens.

Is Update Management component query-able via az cli? (I wasn’t able to find it if so, under az vm) Are Azure Automation accounts manageable via az cli?

My goal:

• Identify Update Management status for a VM.
  (i.e. az vm updatemgmt show -n "MyVM")
• Secondary Goal: Enable Update Management for a VM
  (i.e. az vm updatemgmt status -n "MyVM" -value enable)
• Stretch goal: Have a policy that audits VMs and shoots off an email indicating which machines don’t have update management enabled. (side note: Surprised this isn’t a default available policy definition that ships in Azure - is there a board where can post secondary inquiry on this?)

[sbonds]

Thanks so much! It may seem like a minor thing, but automating these sorts of reports will be quite useful.

[adewaleo]

I will close this as it is not a CLI issue, there isn’t python sdk support for it (as far as I’m aware off) and there is a work around with arm templates.