How to create an Azure Network Diagram

There’s no question that an accurate infrastructure diagram is invaluable to your cloud team. Whether you’re a cloud architect looking to redesign existing infrastructure, a devops engineer tasked with implementing a design or a project manager making sure the roll out has been executed according to the scope, an accurate diagram makes life easier at every step of the project.

How to create an Azure Network Diagram

In the past, the thought of having to create network diagrams was never met with a rush of excitement or enthusiasm. In reality it was a bit of a nightmare. Hours and hours dragging and dropping icons, checking and rechecking console settings, trying to logically arrange things so they could easily be understood and connecting the resources, so you could tell what was going on.

Then you would always be second guessing yourself. Did I miss something? What are the other teams rolling out in this environment that i’m not aware of yet? Have any resources been added or removed since the initial design.

If you’re working in a fast paced dev environment, you may have even avoided creating documentation, until of course the CTO asks why the cloud spend increased by 50% this quarter.

The biggest challenge with diagramming cloud infrastructure, apart from finding the time to do it in the first place, is keeping it up to date. Especially with dynamic components, autoscaling resources and the need to build in acceptable redundancy into the network designs, the ever changing cloud configuration presents an ever moving target that can be expensive and time consuming to document.

Enter Hava. provides both a cloud based or self hosted solution to automatically document your cloud environments by:

  • Connecting your Azure cloud account via Service Principle Credentials

How to create an Azure Infrastructure Diagram using Hava

To import environment diagram data from Azure, you will need to access your Azure Portal at , create a new Service Principle and retrieve a set of credentials for your account.

Open the Azure Portal and launch PowerShell from the top menu bar :

From the command line create a new Service Principal ( In this example we use “HavaServicePrincipal”, but you can use any name )

$sp = New-AzADServicePrincipal -DisplayName HavaServicePrincipal

Then assign read only permissions to it.

$sp = New-AzRoleAssignment -ApplicationId $sp.ApplicationId -RoleDefinitionName “Reader”

Then decrypt the Secret Key ($password)

Decrypt the Password$Ptr = [System.Runtime.InteropServices.Marshal]::SecureStringToCoTaskMemUnicode($sp.Secret) $password = [System.Runtime.InteropServices.Marshal]::PtrToStringUni($Ptr) [System.Runtime.InteropServices.Marshal]::ZeroFreeCoTaskMemUnicode($Ptr)

You will now be able to retrieve the necessary credentials to plug into Hava.

You now have the credentials to login!

Now log in to Hava which will open up the environments screen.

Add Environments

Select “Add Environments”

Click on the “Azure” Tab and enter the credentials you have just gathered from Azure.

Hava will import your Azure Environment, layout the diagram and add the environment tile to the Hava Environments screen. From this point Hava will sync with Azure every hour and log any structural changes, so you always have an accurate visual representation of your Azure Environment and a versioning audit trail of any changes made.

Hava visualises the important components of all the environments it supports. There are other attributes that are displayed when visualised elements are selected to keep the diagrams clean and readable.

Here is a list of imported Azure resources. Visualised resources will appear as a container or icon. Attributes will appear in the Attributes sidebar as elements are selected.

Once imported, all the virtual networks detected in your Azure account will be presented as tiles on the Hava dashboard.

Once Hava has auto generated your Azure infrastructure diagrams, you can create custom diagrams featuring subsets of data like:

  • An individual Virtual Network

Because the hava application is 100% API driven, anything you can see visualized on the diagrams or resource lists can also be returned via API call and integrated into your build pipeline artefacts or internal code or documentation repositories.

Whether you are looking at the current set of diagrams, of viewing historical archived versions, all the Hava diagrams are fully interactive. Clicking on a resource changes the attribute pane to reveal all the important settings related to the resource like :

  • Network Interface

Clicking on the data in the attributes pane, will dive deeper into the associated resources, so you can find out all you need to know without having to go back to the Azure portal.

The Azure diagram is laid out as follows:

  1. Environment — when this top level view is selected, the data source and total monthly estimate is shown

If you would like start building 100% accurate hassle free Azure diagrams, we have a 14 day free trial you can use to get to grips with this easy to use software.

The trial is fully functional & you won’t need a credit card to take it for a spin.

Hop on over to to check it out.

Originally published at

Tech Writer, Developer, Marketer and Generator of Leads.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store