All skills
microsoft avatar

/azure-prepare

@b8a1c66
by microsoftmicrosoft/skills3.1k stars
351

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-prepare

This session only. Nothing lands on disk.

referencesservicesapp-servicetemplatesrecipessqlsourcedotnet.md

≈750 tokens on demand. Your agent reads this file only when SKILL.md points to it.

SQL Database — C# (.NET) — REFERENCE ONLY

Entity Framework Core Setup

Add EF Core with Azure SQL and managed identity support to an ASP.NET Core app.

NuGet Packages

<PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="8.0.*" />
<PackageReference Include="Azure.Identity" Version="1.13.*" />
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.*" />

DbContext

Create Data/AppDbContext.cs:

using Microsoft.EntityFrameworkCore;

namespace MyApp.Data;

public class AppDbContext : DbContext
{
    public AppDbContext(DbContextOptions<AppDbContext> options) : base(options) { }

    public DbSet<TodoItem> TodoItems => Set<TodoItem>();
}

public class TodoItem
{
    public int Id { get; set; }
    public string Title { get; set; } = string.Empty;
    public bool IsComplete { get; set; }
}

Program.cs (additions)

Add these lines to Program.cs — do NOT replace the file:

using Microsoft.EntityFrameworkCore;
using MyApp.Data;

// Add after builder creation
var connectionString = builder.Configuration.GetConnectionString("AZURE_SQL")
    ?? builder.Configuration["AZURE_SQL_CONNECTION_STRING"];

builder.Services.AddDbContext<AppDbContext>(options =>
    options.UseSqlServer(connectionString));

// Add health check for SQL
builder.Services.AddHealthChecks()
    .AddDbContextCheck<AppDbContext>();

// After app build — map health checks so App Service probes reflect SQL connectivity
app.MapHealthChecks("/health");

API Endpoints

Add to Program.cs after app is built:

app.MapGet("/api/todos", async (AppDbContext db) =>
    await db.TodoItems.ToListAsync());

app.MapGet("/api/todos/{id}", async (int id, AppDbContext db) =>
    await db.TodoItems.FindAsync(id) is TodoItem todo
        ? Results.Ok(todo)
        : Results.NotFound());

app.MapPost("/api/todos", async (TodoItem todo, AppDbContext db) =>
{
    db.TodoItems.Add(todo);
    await db.SaveChangesAsync();
    return Results.Created($"/api/todos/{todo.Id}", todo);
});

appsettings.json

{
  "ConnectionStrings": {
    "AZURE_SQL": "Server=localhost;Database=myapp;Trusted_Connection=true;"
  }
}

In production, the AZURE_SQL_CONNECTION_STRING app setting from Azure overrides this with the managed identity connection string.

EF Migrations (postprovision hook)

Create infra/scripts/setup-db.sh:

#!/bin/bash
dotnet ef database update --project src/api

Files to Add

File Action
Data/AppDbContext.cs Create — DbContext + entity models
Program.cs Modify — add DbContext registration + endpoints
appsettings.json Modify — add ConnectionStrings section

Common Patterns

  • Always use AddHealthChecks().AddDbContextCheck<>() for SQL health monitoring
  • Use AsNoTracking() for read-only queries to improve performance
  • Apply migrations via postprovision hook, not at app startup

Source: SKILL.md on GitHub

2 warnings3d4 checks · Risk SAFE
  • Gen Agent Trust Hub3d

    This skill includes security considerations related to the processing of untrusted project files and the retrieval of external development templates. While these operations are essential for modernizing and preparing Azure applications, they represent a surface area for indirect prompt injection and depend on the integrity of external template repositories.

  • Socket3d

    5 alerts: gptAnomaly, gptSecurity

  • Snyk3d

    Risk: LOW · No issues

  • Runlayer7mo

    86/87 files flagged

Signed by skilld at b8a1c66. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week
metadata
{
  "author": "Microsoft",
  "version": "1.3.4"
}

README badge

README badge for microsoft/skills/azure-prepare