To join Azure Advisor resources with security resources in Azure Resource Graph, you can use the join operator in your queries. The microsoft.advisor/recommendations resource type can be joined with the securityResources table to retrieve relevant information, including the Resource ID and Part Number, which may help in obtaining your EA pricing.
Here’s a basic example of how you might structure your query:
AdvisorResources
| join kind=inner SecurityResources on $left.resourceId == $right.resourceId
| project $left.resourceId, $left.partNumber, $right.currentSku, $right.targetSku
This query joins the AdvisorResources with SecurityResources on the resourceId, allowing you to access both the current and target SKU information along with the resource part number. Adjust the fields in the project clause as necessary to fit your specific needs.
Keep in mind that the actual structure of your query may vary based on your specific requirements and the data available in your Azure environment.