skilld
All skills
microsoft avatar

/azure-enterprise-infra-planner

@d58859a
by microsoftmicrosoft/skills3.1k stars
351

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-enterprise-infra-planner

This session only. Nothing lands on disk.

referencesconstraintsmessaging.md

≈653 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Messaging Pairing Constraints

Event Grid Topic

Paired With Constraint
Event Subscriptions Subscriptions are child resources. Delivery endpoints include: Webhook, Azure Function, Event Hub, Service Bus Queue/Topic, Storage Queue, Hybrid Connection.
Private Endpoint Only available with Premium SKU. Set publicNetworkAccess: 'Disabled' when using private endpoints exclusively.
Managed Identity Required for dead-letter destinations and delivery to Azure resources that require authentication (Event Hub, Service Bus, Storage).
Function App Use Event Grid trigger binding. Subscription endpoint type is AzureFunction. Function must have Event Grid extension registered.
Event Hub Subscription endpoint type is EventHub. Provide the Event Hub resource ID. Requires managed identity or connection string.
Storage Queue Subscription endpoint type is StorageQueue. Provide storage account ID and queue name.
Dead Letter Dead-letter destination must be a Storage blob container. Requires managed identity or storage key for access.

Event Hub

Paired With Constraint
VNet Standard, Premium, and Dedicated SKUs support VNet service endpoints and private endpoints.
Zone Redundancy Available in Standard (with ≥4 TU recommended) and Premium.
Kafka Kafka protocol support available in Standard and Premium only (not Basic).
Capture Event capture to Storage/Data Lake available in Standard and Premium only.
Consumer Groups Basic: 1 consumer group. Standard: 20. Premium: 100. Dedicated: 1,000.
Retention Basic: 1 day. Standard: 1–7 days. Premium: up to 90 days.
Function App Event Hub trigger uses connection string or managed identity. Set EventHubConnection in app settings.

Service Bus

Paired With Constraint
Topics Only Standard and Premium SKUs support topics and subscriptions. Basic supports queues only.
VNet Only Premium SKU supports VNet service endpoints and private endpoints.
Zone Redundancy Only Premium SKU supports zone redundancy.
Partitioning Premium messaging partitions cannot be changed after creation.
Message Size Basic/Standard: max 256 KB. Premium: max 100 MB. Plan accordingly for large payloads.
Function App Service Bus trigger uses connection string or managed identity. Set ServiceBusConnection in app settings.

Source: SKILL.md on GitHub

Third-party checks

No alerts15d3 checks · Risk SAFE
  • Gen Agent Trust Hub15d

    This skill provides a comprehensive framework for planning and deploying Azure infrastructure. It follows a rigorous 7-phase gated pipeline that incorporates multiple security checkpoints, including mandatory security scanning with Checkov, 'secure-by-default' infrastructure patterns, and explicit user-approval gates for deployment. No security issues were identified.

  • Socket15d

    No alerts

  • Snyk15d

    Risk: LOW · No issues

Provenance

Signed by skilld at d58859a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last month

Capability

metadata
{
  "author": "Microsoft",
  "version": "1.4.1"
}

README badge

README badge for microsoft/skills/azure-enterprise-infra-planner