Microsoft Azure · Infrastructure · YoctoIT tech page

Arc

The single pane for hybrid: servers, Kubernetes and databases governed from Azure wherever they are — your data center included.

FOCUS · GOVERNANCE EVERYWHEREThe same policies, inventory and security for cloud and on-prem: Arc extends the control plane
Request the Free Assessment Learn more
YoctoIT material for clients and partners · Microsoft, Azure, Entra, Defender and the other products mentioned are trademarks of Microsoft Corporation.
01 · What it is

Azure Arc, made clear.

Arc projects external resources into Azure: on-prem servers (Windows, Linux), Kubernetes clusters, SQL databases become Azure objects — with tags, policies, RBAC, Defender and update management. The result: a single way to govern the whole estate, wherever it is.

Ovunque
on-prem, other clouds, edge: if it has an agent, it's governed
Policy
the same Azure Policies across the whole estate: compliance measured
Defender
the security posture extended to servers outside Azure
Azure Arc
OFFICIAL MICROSOFT BRANDING · ARC
PORTALE AZURE REALE · SERVER ARC-ENABLED · FONTE: MICROSOFT LEARN
REAL AZURE PORTAL · ARC-ENABLED SERVERS · SOURCE: MICROSOFT LEARN
02 · How to use it well

The things that make the difference.

The extended plane

Azure portalunified inventory and governance
Arc servers
Arc K8s
Arc SQL
the three worlds projected
Policy · RBAC · Update · Defenderthe same tools for everything
Data center, edge, other cloudswhere the resources really live
One control plane, all the sites

Clean onboarding

Agents distributed via automation, tags and structure decided beforehand: an inventory born tidy.

Update management

On-prem Windows and Linux patching orchestrated from Azure: a single calendar for the whole estate.

Compliance at a glance

The baselines (CIS, ISO) measured on site too: the audit report comes out of the portal.

SQL under control

The scattered SQL Servers inventoried, assessed and protected: the end of ghost databases.

03 · In depth

Agents, identity and extended governance

Arc enrolls servers (the connected machine agent), K8s clusters and data: every resource becomes an ARM object with managed identity, tags and RBAC; Azure Policies (with guest configuration) verify and remediate inside the OS; extensions bring monitoring, Defender and update management everywhere. For SQL, Arc enables inventory, assessment and best practices; for K8s, GitOps with managed Flux.

  • Oggetto ARM — the on-prem server with a resource ID: tags, RBAC and policies like in Azure
  • Managed identity — on-prem apps talking to Azure services without secrets
  • Guest configuration — policies INSIDE the OS: operating system audit and remediation
  • Azure Update Manager — Windows/Linux patching orchestrated cross-environment
  • Defender via Arc — the security posture outside Azure too
  • GitOps Flux — Arc clusters aligned from the repo: configuration that converges
04 · Numbers and lifecycle

The numbers that matter.

1
control plane for the whole hybrid estate
0
VPNs needed: the agent goes out over HTTPS
100%
of Azure policies applicable on-prem
mensile
the update cycle orchestrated by Update Manager
Hybrid is governed from one point: we enroll the estate, bring policies and patches everywhere, and the multi-site becomes a single inventory.
05 · Use cases

Where it really pays off.

Hybrid estates

Those with 50 servers on site and 50 in the cloud who want ONE management.

Multi-site

Branches and plants governed without dedicated infrastructure.

The path to the cloud

First you govern, then you migrate: Arc is the sensible first step.

Untidy hybrid costs double: with Arc we put the whole estate under a single direction.