{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/", "slug": "dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode", "url": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/" }, "title": "Use the VM resource API that matches the scale set's orchestration mode", "summary": "Why does a scale-set management script need different instance-detail calls for Flexible and Uniform orchestration?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:28:52+00:00", "modified_at": "2026-09-10T00:55:36+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 249, "potentially_affected": "Automation that inventories or manages VM instances in Azure Flexible or Uniform scale sets.", "dse_recommendation": "Branch instance-management automation by orchestration mode and test the resource type and returned detail, not just the scale-set name.", "primary_source": { "name": "Orchestration modes for Virtual Machine Scale Sets in Azure - Azure Virtual Machine Scale Sets | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Flexible scale sets manage ordinary Azure VM resources; Uniform instances instead use the scale-set VM resource API. Microsoft recommends standard VM APIs for Flexible instance management. A Flexible scale-set VM listing provides member IDs, while standard VM retrieval supplies individual VM details. Its boot-diagnostics access likewise uses standard VM operations, not the scale-set VM boot-diagnostics API. Orchestration mode is selected at creation and is not an editable setting afterward. Microsoft Learn.

\n

Applicability

\n

Review scripts that were written for Uniform instances before applying them to a Flexible deployment. Keep membership discovery separate from retrieving a particular machine’s model, status, or diagnostics. A matching scale-set name should not be the only input used to choose an operation.

\n

DSE recommendation

\n

Branch instance-management automation by orchestration mode and test the resource type and returned detail, not just the scale-set name. Make that choice explicit in shared inventory and diagnostic functions. Preserve the returned VM resource ID as the handoff between membership enumeration and detailed inspection. Do not propose changing orchestration mode as a quick repair for an incompatible API call.

\n

Verification

\n

Run the read-only workflow against a known instance in each supported mode. Confirm that the selected call returns that instance’s expected model and diagnostic information rather than only membership identifiers. Retain the request resource type, target ID, and response shape in the test evidence. Treat an empty or incomplete result as a failed compatibility test until its meaning is understood.

\n

Official references

\n

Microsoft Learn: Scale-set orchestration modes. Source reviewed September 9, 2026.

", "content_text": "Source facts\nFlexible scale sets manage ordinary Azure VM resources; Uniform instances instead use the scale-set VM resource API. Microsoft recommends standard VM APIs for Flexible instance management. A Flexible scale-set VM listing provides member IDs, while standard VM retrieval supplies individual VM details. Its boot-diagnostics access likewise uses standard VM operations, not the scale-set VM boot-diagnostics API. Orchestration mode is selected at creation and is not an editable setting afterward. Microsoft Learn.\nApplicability\nReview scripts that were written for Uniform instances before applying them to a Flexible deployment. Keep membership discovery separate from retrieving a particular machine’s model, status, or diagnostics. A matching scale-set name should not be the only input used to choose an operation.\nDSE recommendation\nBranch instance-management automation by orchestration mode and test the resource type and returned detail, not just the scale-set name. Make that choice explicit in shared inventory and diagnostic functions. Preserve the returned VM resource ID as the handoff between membership enumeration and detailed inspection. Do not propose changing orchestration mode as a quick repair for an incompatible API call.\nVerification\nRun the read-only workflow against a known instance in each supported mode. Confirm that the selected call returns that instance’s expected model and diagnostic information rather than only membership identifiers. Retain the request resource type, target ID, and response shape in the test evidence. Treat an empty or incomplete result as a failed compatibility test until its meaning is understood.\nOfficial references\nMicrosoft Learn: Scale-set orchestration modes. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nFlexible scale sets manage ordinary Azure VM resources; Uniform instances instead use the scale-set VM resource API. Microsoft recommends standard VM APIs for Flexible instance management. A Flexible scale-set VM listing provides member IDs, while standard VM retrieval supplies individual VM details. Its boot-diagnostics access likewise uses standard VM operations, not the scale-set VM boot-diagnostics API. Orchestration mode is selected at creation and is not an editable setting afterward. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes).\n\n## Applicability\n\nReview scripts that were written for Uniform instances before applying them to a Flexible deployment. Keep membership discovery separate from retrieving a particular machine’s model, status, or diagnostics. A matching scale-set name should not be the only input used to choose an operation.\n\n## DSE recommendation\n\nBranch instance-management automation by orchestration mode and test the resource type and returned detail, not just the scale-set name. Make that choice explicit in shared inventory and diagnostic functions. Preserve the returned VM resource ID as the handoff between membership enumeration and detailed inspection. Do not propose changing orchestration mode as a quick repair for an incompatible API call.\n\n## Verification\n\nRun the read-only workflow against a known instance in each supported mode. Confirm that the selected call returns that instance’s expected model and diagnostic information rather than only membership identifiers. Retain the request resource type, target ID, and response shape in the test evidence. Treat an empty or incomplete result as a failed compatibility test until its meaning is understood.\n\n## Official references\n\n[Microsoft Learn: Scale-set orchestration modes](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/", "url": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Use the VM resource API that matches the scale set's orchestration mode", "item": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/", "url": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/", "headline": "Use the VM resource API that matches the scale set's orchestration mode", "description": "Why does a scale-set management script need different instance-detail calls for Flexible and Uniform orchestration?", "abstract": "Why does a scale-set management script need different instance-detail calls for Flexible and Uniform orchestration?", "articleBody": "Source facts\nFlexible scale sets manage ordinary Azure VM resources; Uniform instances instead use the scale-set VM resource API. Microsoft recommends standard VM APIs for Flexible instance management. A Flexible scale-set VM listing provides member IDs, while standard VM retrieval supplies individual VM details. Its boot-diagnostics access likewise uses standard VM operations, not the scale-set VM boot-diagnostics API. Orchestration mode is selected at creation and is not an editable setting afterward. Microsoft Learn.\nApplicability\nReview scripts that were written for Uniform instances before applying them to a Flexible deployment. Keep membership discovery separate from retrieving a particular machine’s model, status, or diagnostics. A matching scale-set name should not be the only input used to choose an operation.\nDSE recommendation\nBranch instance-management automation by orchestration mode and test the resource type and returned detail, not just the scale-set name. Make that choice explicit in shared inventory and diagnostic functions. Preserve the returned VM resource ID as the handoff between membership enumeration and detailed inspection. Do not propose changing orchestration mode as a quick repair for an incompatible API call.\nVerification\nRun the read-only workflow against a known instance in each supported mode. Confirm that the selected call returns that instance’s expected model and diagnostic information rather than only membership identifiers. Retain the request resource type, target ID, and response shape in the test evidence. Treat an empty or incomplete result as a failed compatibility test until its meaning is understood.\nOfficial references\nMicrosoft Learn: Scale-set orchestration modes. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:28:52+00:00", "dateModified": "2026-09-10T00:55:36+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-184-use-the-vm-resource-api-that-matches-the-scale-set-s-orchestration-mode/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Use the VM resource API that matches the scale set's orchestration mode" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 249, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Orchestration modes for Virtual Machine Scale Sets in Azure - Azure Virtual Machine Scale Sets | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes" } } ] } }