Azure Arc
Azure Arc is a Microsoft Azure service that extends Azure management, governance, and services to infrastructure running outside Azure — including on-premises servers, other clouds, and edge devices — by projecting them as Azure resources…
Definition
Azure Arc is a Microsoft Azure service that extends Azure management, governance, and services to infrastructure running outside Azure — including on-premises servers, other clouds, and edge devices — by projecting them as Azure resources inside a single control plane.
Overview
Azure Arc does not move workloads into Azure; instead it brings Azure's management plane out to wherever infrastructure already lives. By installing a lightweight Arc agent on a server, Kubernetes cluster, SQL Server instance, or virtual machine running on-premises, in AWS, in Google Cloud, or at the edge, that resource is registered in Azure Resource Manager and appears in the Azure portal alongside native Azure resources, gaining access to Azure Policy, Azure Monitor, Microsoft Defender for Cloud, role-based access control, and tagging. Arc covers several distinct resource types with different levels of capability: Arc-enabled servers extend basic management (inventory, patching, policy, monitoring) to any Windows or Linux machine; Arc-enabled Kubernetes lets any conformant Kubernetes cluster — on-premises, in another cloud, or at the edge — receive GitOps-based configuration and Azure service deployment; Arc-enabled data services allow running Azure SQL Managed Instance or PostgreSQL Hyperscale on customer-controlled infrastructure while retaining Azure's data-service management experience; and Azure Arc-enabled VMware/System Center vSphere brings Azure management to existing virtualization estates. The core value proposition is governance and operational consistency: organizations with a mixed estate of on-premises data centers, multiple public clouds, and edge sites can apply one set of Azure Policy definitions, one RBAC model, and one monitoring pipeline across all of it, rather than maintaining separate tooling per environment. This makes Arc fundamentally a control-plane and governance product rather than a compute product — unlike AWS Outposts, Arc does not ship physical hardware; it manages whatever compute a customer already has. Because Arc is agent-based and works with existing infrastructure rather than requiring specific AWS- or Azure-branded hardware, it is often positioned as Microsoft's answer to multi-cloud and hybrid governance challenges, competing directly with Google Anthos in that space.
Key Features
- Projects non-Azure infrastructure as manageable Azure Resource Manager resources
- Covers servers, Kubernetes clusters, data services, and VMware/vSphere environments
- Applies Azure Policy, RBAC, tagging, and Azure Monitor across hybrid and multi-cloud estates
- Uses lightweight agents rather than requiring dedicated AWS-branded hardware
- Supports GitOps-based configuration for Arc-enabled Kubernetes clusters
- Enables running Azure data services (SQL, PostgreSQL) on customer-owned infrastructure
- Works across on-premises, AWS, Google Cloud, and edge locations simultaneously
- Integrates with Microsoft Defender for Cloud for unified security posture management