/

/azure-enterprise-infra-planner

351

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

41 files
142.4 KB
MIT
Updated last month
GitHub
No alerts

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-enterprise-infra-planner

This session only. Nothing lands on disk.

referencesphases4-generate-plan.md

792 B raw

≈198 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Phase 4: Generate Plan

Build <project-root>/.azure/infrastructure-plan.json using the schema in schema.md. Set meta.status to draft.

Use the user requirements and the research gathered from previous phases to assist:

Phase 1: insights from <project-root>/.azure/insights.json (existing environment, user-selected focus areas).
Phase 2: clarified requirements, derived sub-goals (inputs.subGoals), and WAF summaries covering missing resources, property hardening, and architecture patterns.
Phase 3: refined resource list, including ARM types, naming rules, and pairing constraints.

Important: Write the plan to file progressively using inline edits - never hold the full plan in a single tool-call output.

Gate

The plan is fully written to file.

Source: SKILL.md on GitHub

Third-party checks

No alerts15d3 checks · Risk SAFE

Gen Agent Trust Hub15d
This skill provides a comprehensive framework for planning and deploying Azure infrastructure. It follows a rigorous 7-phase gated pipeline that incorporates multiple security checkpoints, including mandatory security scanning with Checkov, 'secure-by-default' infrastructure patterns, and explicit user-approval gates for deployment. No security issues were identified.
Socket15d
No alerts
Snyk15d
Risk: LOW · No issues

Provenance

Signed by skilld at d58859a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last month

Capability

metadata: { "author": "Microsoft", "version": "1.4.1" }

/azure-enterprise-infra-planner