All skills
microsoft avatar

/azure-app-onboard

@b8a1c66
by microsoftmicrosoft/skills3.1k stars
351

End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-app-onboard

This session only. Nothing lands on disk.

referencesiac-resources.md

≈671 tokens on demand. Your agent reads this file only when SKILL.md points to it.

IaC Resources — Official Documentation & Tools

Look up when stuck after 3 tries, edge cases, or validating generated code against ground truth.

Bicep

Resource URL Use When
Bicep Documentation https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ Syntax, file structure, deployment scopes, install
Azure Resource Reference https://learn.microsoft.com/en-us/azure/templates/ Resource properties, API versions, schema per type

Terraform

Resource URL Use When
Terraform Registry — azurerm https://registry.terraform.io/providers/hashicorp/azurerm/latest Resource type properties, argument reference, import blocks
Terraform Registry — azapi https://registry.terraform.io/providers/azure/azapi/latest Preview resources not yet in azurerm; maps to ARM REST APIs

Validation Tools

Tool Format Purpose
bicep build Bicep Syntax + schema validation
az deployment group create --what-if Bicep ARM-level dry run with change preview
terraform validate Terraform Syntax + schema validation
terraform plan Terraform Provider-level dry run

Deploy Troubleshooting

⛔ Primary lookup path: Call mcp_azure_mcp_documentation with the error message first. Use the table below as fallback when MCP is unavailable or returns no results.

On repeat failures (same error 2+ consecutive attempts): fetch_webpage the matching URL below with the error message as query. Apply the documented fix — do not retry the same approach.

Resource URL Use When
Common ARM Deployment Errors https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors InvalidTemplateDeployment, SkuNotAvailable, QuotaExceeded, any ARM error code
App Service Troubleshooting https://learn.microsoft.com/en-us/troubleshoot/azure/app-service/ Startup crashes, Kudu/Oryx build failures, health probe issues
App Service Zip Deploy Guide https://learn.microsoft.com/en-us/azure/app-service/deploy-zip Zip deploy, SCM_DO_BUILD_DURING_DEPLOYMENT, Kudu publish API
Container Apps Troubleshooting https://learn.microsoft.com/en-us/azure/container-apps/troubleshooting Revision failures, ingress errors, secret resolution, image pull failures
Quota Increase Portal https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas Direct link for quota increase requests

Source: Official Microsoft Learn, HashiCorp Developer, and Azure documentation.

Source: SKILL.md on GitHub

No alerts3d3 checks · Risk SAFE
  • Gen Agent Trust Hub3d

    This skill provides a comprehensive end-to-end orchestrator for deploying applications to Azure. It incorporates several security-focused patterns, such as secrets management via Azure Key Vault, managed identity integration, and robust preflight validation. There are some security considerations, such as a surface for indirect prompt injection during workspace analysis and broad default firewall rules, but these are managed through explicit user approval gates and documented trade-offs.

  • Socket3d

    No alerts

  • Snyk3d

    Risk: LOW · No issues

Signed by skilld at b8a1c66. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week
metadata
{
  "author": "Microsoft",
  "version": "1.2.4"
}

README badge

README badge for microsoft/skills/azure-app-onboard