skilld
All skills
microsoft avatar

/azure-enterprise-infra-planner

@d58859a
by microsoftmicrosoft/skills3.1k stars
351

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-enterprise-infra-planner

This session only. Nothing lands on disk.

referencesresourcesnetworking-connectivity.md

≈925 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Networking (Connectivity) Resources

Resource ARM Type API Version CAF Prefix Naming Scope Region
Azure Bastion Microsoft.Network/bastionHosts 2024-07-01 bas Resource group Mainstream
Azure Firewall Microsoft.Network/azureFirewalls 2024-07-01 afw Resource group Mainstream
DNS Zone Microsoft.Network/dnsZones 2018-05-01 (domain) Resource group Foundational
VPN Gateway Microsoft.Network/virtualNetworkGateways 2024-07-01 vpng Resource group Foundational
Private DNS Zone Microsoft.Network/privateDnsZones 2024-06-01 (domain) Resource group Foundational
Private Endpoint Microsoft.Network/privateEndpoints 2024-07-01 pep Resource group Foundational

Documentation

Resource Bicep Reference Service Overview Naming Rules Additional
Azure Bastion 2024-07-01 Bastion overview Naming rules Configuration settings
Azure Firewall 2024-07-01 Firewall overview Naming rules SKU comparison
DNS Zone 2018-05-01 Azure DNS overview Naming rules Delegate a domain
VPN Gateway 2024-07-01 VPN Gateway overview Naming rules Gateway SKUs
Private DNS Zone 2024-06-01 Private DNS overview Naming rules PE DNS config
Private Endpoint 2024-07-01 PE overview Naming rules DNS zone values

Source: SKILL.md on GitHub

Third-party checks

No alerts15d3 checks · Risk SAFE
  • Gen Agent Trust Hub15d

    This skill provides a comprehensive framework for planning and deploying Azure infrastructure. It follows a rigorous 7-phase gated pipeline that incorporates multiple security checkpoints, including mandatory security scanning with Checkov, 'secure-by-default' infrastructure patterns, and explicit user-approval gates for deployment. No security issues were identified.

  • Socket15d

    No alerts

  • Snyk15d

    Risk: LOW · No issues

Provenance

Signed by skilld at d58859a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last month

Capability

metadata
{
  "author": "Microsoft",
  "version": "1.4.1"
}

README badge

README badge for microsoft/skills/azure-enterprise-infra-planner