All skills
microsoft avatar

/azure-enterprise-infra-planner

@d58859a
by microsoftmicrosoft/skills3.1k stars
351

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-enterprise-infra-planner

This session only. Nothing lands on disk.

referencesphases5-verify.md

≈204 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Phase 5: Verify Plan

Thoroughly and objectively verify the generated plan based on the following checklists:

Other mandatory areas to check:

  • Goal coverage — does every user requirement map to a resource?
  • Dependency completeness — every dependencies[] entry resolves
  • Pairing constraints — SKU compatibility, subnet conflicts, storage pairing

You must fix any issue in-place in the plan JSON.

Gate

  • Every item in both checklists pass (or have been fixed).
  • Present plan to user and wait for manual and explicit approval before proceeding.
    • Edit meta.status to approved if approved.
    • Otherwise, ask the user for improvements, and return to Phase 2, 3, or 4 based on the nature of their request.

Source: SKILL.md on GitHub

No alerts15d3 checks · Risk SAFE
  • Gen Agent Trust Hub15d

    This skill provides a comprehensive framework for planning and deploying Azure infrastructure. It follows a rigorous 7-phase gated pipeline that incorporates multiple security checkpoints, including mandatory security scanning with Checkov, 'secure-by-default' infrastructure patterns, and explicit user-approval gates for deployment. No security issues were identified.

  • Socket15d

    No alerts

  • Snyk15d

    Risk: LOW · No issues

Signed by skilld at d58859a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last month
metadata
{
  "author": "Microsoft",
  "version": "1.4.1"
}

README badge

README badge for microsoft/skills/azure-enterprise-infra-planner