/

/azure-enterprise-infra-planner

351

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

41 files
142.4 KB
MIT
Updated last month
GitHub
No alerts

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-enterprise-infra-planner

This session only. Nothing lands on disk.

referencesresourcesnetworking-traffic.md

2.6 KB raw

≈659 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Networking (Traffic) Resources

Resource	ARM Type	API Version	CAF Prefix	Naming Scope	Region
API Management	`Microsoft.ApiManagement/service`	`2024-05-01`	`apim`	Global	Mainstream
Application Gateway	`Microsoft.Network/applicationGateways`	`2024-07-01`	`agw`	Resource group	Foundational
Front Door	`Microsoft.Cdn/profiles`	`2025-06-01`	`afd`	Resource group	Foundational
Load Balancer	`Microsoft.Network/loadBalancers`	`2024-07-01`	`lbi`/`lbe`	Resource group	Foundational

Documentation

Resource	Bicep Reference	Service Overview	Naming Rules	Additional
API Management	2024-05-01	APIM overview	Naming rules	VNet integration
Application Gateway	2024-07-01	App Gateway overview	Naming rules	v2 features
Front Door	2025-06-01	Front Door overview	Naming rules	Routing architecture
Load Balancer	2024-07-01	LB overview	Naming rules	Standard LB

Source: SKILL.md on GitHub

Third-party checks

No alerts15d3 checks · Risk SAFE

Gen Agent Trust Hub15d
This skill provides a comprehensive framework for planning and deploying Azure infrastructure. It follows a rigorous 7-phase gated pipeline that incorporates multiple security checkpoints, including mandatory security scanning with Checkov, 'secure-by-default' infrastructure patterns, and explicit user-approval gates for deployment. No security issues were identified.
Socket15d
No alerts
Snyk15d
Risk: LOW · No issues

Provenance

Signed by skilld at d58859a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last month

Capability

metadata: { "author": "Microsoft", "version": "1.4.1" }

/azure-enterprise-infra-planner