The Multi-Cloud Reality
Most enterprise customers I work with at Microsoft don't have a single cloud. They have Azure for some workloads, AWS for others, on-premises infrastructure they can't migrate yet, and often some GCP. Managing governance, security, and compliance across all of these is a major operational challenge. Azure Arc solves this.
What is Azure Arc?
Azure Arc extends the Azure control plane to any infrastructure — on-premises servers, Kubernetes clusters running anywhere, SQL Server instances outside Azure, and PostgreSQL databases. Once a resource is Arc-enabled, it appears in the Azure portal and can be managed with the same Azure tools: Azure Policy, Microsoft Defender for Cloud, Azure Monitor, and Role-Based Access Control.
What Can You Arc-Enable?
- Servers — Windows and Linux servers anywhere (physical, VMware, AWS EC2, GCP Compute) managed through Azure
- Kubernetes clusters — any CNCF-conformant Kubernetes cluster (EKS, GKE, on-prem Rancher, OpenShift) managed through Azure Arc
- SQL Server — on-premises or multi-cloud SQL Server instances with Azure-managed backups, assessments, and Defender
- Azure Data Services — run Azure SQL Managed Instance and PostgreSQL Hyperscale on-premises with cloud billing and management
Real Enterprise Use Cases
Use Case 1 — Government Compliance
A government agency must keep certain data on-premises for sovereignty reasons but wants to use Azure Policy to enforce security standards across all servers. Azure Arc enables exactly this — on-prem servers appear in Azure, Azure Policy is applied, compliance is reported centrally, all without moving data.
Use Case 2 — Multi-Cloud Kubernetes Management
An enterprise runs EKS on AWS and AKS on Azure. With Azure Arc, both clusters are managed from a single pane of glass — the same GitOps deployment pipelines, the same policy controls, the same monitoring dashboard, regardless of which cloud the cluster runs on.
Use Case 3 — Phased Cloud Migration
A company migrating to Azure over 3 years uses Arc to bring their on-premises servers under Azure management immediately — getting the governance benefits now, while the physical migration happens gradually.
How Arc Works — The Agent
Azure Arc works by installing a lightweight agent (the Connected Machine agent for servers, or the Arc Kubernetes extension) on your resource. The agent establishes an outbound HTTPS connection to Azure. No inbound ports required — it works through standard corporate firewalls.
Pricing
Azure Arc-enabled servers are free for basic inventory and management. Additional capabilities — Defender for Servers, Azure Monitor, Extended Security Updates for Windows 2012 — are priced per server per month. For most enterprises, the governance and security value far exceeds the cost.
My Recommendation
If you manage infrastructure outside Azure and want consistent governance, security, and monitoring — Arc is one of the highest-value Azure features available. I have recommended and deployed Arc across multiple Singapore government and enterprise customers with significant operational efficiency gains.
