Multicloud connector resource representation in Azure

The multicloud connector enabled by Azure Arc lets you connect non-Azure public cloud resources to Azure, providing a centralized source for management and governance. Currently, AWS public cloud environments are supported.

This article describes how AWS resources from a connected public cloud are represented in your Azure environment.

Resource group name

After you connect your AWS public cloud to Azure, the multicloud connector creates a new resource group with the following naming convention:

aws_yourAwsAccountId

Note

Tags are not created when the Resource Group is created with the connector. Be sure to disable any policies for Tags being required when creating a Resource Group, otherwise the Resource Group creation process will fail due to the Tags being missing.

For every AWS resource discovered through the Inventory solution, an Azure representation is created in the aws_yourAwsAccountId resource group. Each resource has the AwsConnector namespace value associated with its AWS service.

EC2 instances connected to Azure Arc through the Arc onboarding solution are also represented as Arc-enabled server resources under Microsoft.HybridCompute/machines in the aws_yourAwsAccountId resource group. If you previously onboarded an EC2 machine to Azure Arc, you won't see that machine in this resource group, because it already has a representation in Azure.

Region mapping

Resources that are discovered in AWS and projected in Azure are placed in Azure regions, using the following mapping scheme:

AWS region Mapped Azure region
us-east-1 EastUS
us-east-2 EastUS
us-west-1 EastUS
us-west-2 EastUS
ca-central-1 EastUS
ap-southeast-1 Southeast Asia
ap-northeast-1 Southeast Asia
ap-northeast-3 Southeast Asia
ap-south Southeast Asia
ap-southeast-2 AU East
eu-west-1 West Europe
eu-central-1 West Europe
eu-north-1 West Europe
eu-west-2 UK South
sa-east-1 Brazil South

Removing resources

If you remove the connected cloud, or disable a solution, periodic syncs will stop for that solution, and resources will no longer be updated in Azure. However, the resources will remain in your Azure account unless you delete them. To avoid confusion, we recommend removing these AWS resource representations from Azure when you remove an AWS public cloud.

To remove all of the AWS resource representations from Azure, navigate to the aws_yourAwsAccountId resource group, then delete it.

If you delete the connector, you should delete the Cloud Formation template on AWS. If you delete a solution, you'll also need to update your Cloud Formation template to remove the required access for the deleted solution. You can find the updated template for the connector in the Azure portal under Settings > Authentication template.