az-lock

Manage Azure resource locks

TLDR

Create a read-only lock on a resource group

$ az lock create --name [MyLock] --resource-group [MyResourceGroup] --lock-type ReadOnly

Create a delete lock to prevent accidental deletion

$ az lock create --name [MyLock] --resource-group [MyResourceGroup] --lock-type CanNotDelete

List all locks in a resource group

$ az lock list --resource-group [MyResourceGroup]

Show details of a lock

$ az lock show --name [MyLock] --resource-group [MyResourceGroup]

Delete a lock

$ az lock delete --name [MyLock] --resource-group [MyResourceGroup]

Create a lock on a specific resource

$ az lock create --name [MyLock] --resource-group [MyResourceGroup] --resource-name [MyResource] --resource-type [Microsoft.Storage/storageAccounts] --lock-type CanNotDelete

az lock manages Azure resource locks. Locks prevent accidental deletion or modification of critical resources. Two lock types are available: CanNotDelete allows read and modify operations but prevents deletion, while ReadOnly allows only read operations.Locks can be applied at subscription, resource group, or individual resource level. Child resources inherit locks from parent resources.

PARAMETERS

--name -n

Name of the lock.

--lock-type -t

Type of lock: CanNotDelete or ReadOnly.

--resource-group -g

Name of resource group.

--resource-name --resource

Name of the resource being locked.

--resource-type

The type of the resource being locked (e.g., Microsoft.Network/subnets).

--namespace

Provider namespace (e.g., Microsoft.Provider).

--parent

Parent path for nested resources (e.g., resA/myA/resB/myB).

--notes

Notes about the lock.

--ids

One or more resource IDs. Used with delete/show/update instead of --name.

SUBCOMMANDS

create

Create a lock.

delete

Delete a lock.

list

List locks.

show

Show details of a lock.

update

Update a lock.

INSTALL

sudo dnf install azure-cli

sudo pacman -S azure-cli

sudo zypper install azure-cli

brew install azure-cli

nix profile install nixpkgs#azure-cli

CAVEATS

Requires Azure CLI and appropriate RBAC permissions (Owner or User Access Administrator). Locks do not restrict actions performed by the Azure platform itself. A ReadOnly lock on a resource group affects all resources within it.