Task 01: Remove the Lab Environment

Introduction

When you finish the lab, it’s important to remove deployed resources to avoid ongoing Azure charges. Deleting the resource groups automatically removes all associated resources, including virtual machines, storage accounts, workspaces, and network components.

Description

You’ll identify and delete the resource groups created during the exercises, confirm deletion in the Azure portal, and verify that all resources are removed.

Success criteria

• All lab-related resource groups are deleted.
• No residual resources remain in the subscription.

Key steps:

1. In the Azure portal, search for and select Resource groups.

2. In the Filter by name box, enter sentinel.

3. Identify the following resource groups:

   • rg-sentinel-lab
   • rg-sentinel-custom-lab (if created)

4. Select each resource group, then select Delete resource group.

5. In the confirmation box, enter the resource group name exactly as shown, and select Delete.

   Deletion may take several minutes. You can monitor progress from the Notifications panel in the Azure portal.

6. Once deletion is complete, refresh the Resource groups page to verify they no longer appear.

   Deleting the resource group automatically removes all contained resources — including the Sentinel workspace, Data Lake configuration, virtual machine, storage account, and related network components.