skilld
All skills
microsoft avatar

/azure-prepare

@b8a1c66
by microsoftmicrosoft/skills3.1k stars
351

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-prepare

This session only. Nothing lands on disk.

referencesservicesfunctionstemplatesrecipescosmosdbREADME.md

≈397 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Cosmos DB Recipe

Cosmos DB change feed trigger with managed identity authentication.

Template Selection

Resource filter: cosmos
Discover templates via MCP or CDN manifest where resource == "cosmos" and language matches user request.

Troubleshooting

"Forbidden" on Data Operations

Cause: Cosmos DB uses two separate RBAC systems — Azure RBAC (control plane) and Cosmos SQL RBAC via sqlRoleAssignments (data plane). The MCP template configures both, but if the SQL role assignment is missing, data reads/writes will fail even if Azure RBAC is correctly assigned.

Solution: Verify the sqlRoleAssignments resource exists in the Bicep/Terraform output. Check the function app has the Cosmos DB Built-in Data Contributor SQL role.

UAMI Connection Issues

Cause: Missing managed identity credential settings.
Solution: Ensure all three settings are present in app configuration:

  • COSMOS_CONNECTION__accountEndpoint
  • COSMOS_CONNECTION__credential (value: managedidentity)
  • COSMOS_CONNECTION__clientId

See Cosmos DB trigger connections for identity-based config — refer to the "Connections" section on that page for managed identity app settings.

Eval

Path Description
eval/summary.md Evaluation summary
eval/python.md Python evaluation results
eval/typescript.md TypeScript evaluation results

Source: SKILL.md on GitHub

Third-party checks

2 warnings3d4 checks · Risk SAFE
  • Gen Agent Trust Hub3d

    This skill includes security considerations related to the processing of untrusted project files and the retrieval of external development templates. While these operations are essential for modernizing and preparing Azure applications, they represent a surface area for indirect prompt injection and depend on the integrity of external template repositories.

  • Socket3d

    5 alerts: gptAnomaly, gptSecurity

  • Snyk3d

    Risk: LOW · No issues

  • Runlayer7mo

    86/87 files flagged

Provenance

Signed by skilld at b8a1c66. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week

Capability

metadata
{
  "author": "Microsoft",
  "version": "1.3.4"
}

README badge

README badge for microsoft/skills/azure-prepare